iDRAC7, iDRAC8 - Improper Error Handling

Vulnerability

Dell EMC iDRAC7 and iDRAC8 firmware versions prior to 2.61.60.60 contain an improper error handling vulnerability. This flaw resides in the boot process and can be triggered by an unauthenticated attacker with physical access to the system, allowing them to drop into the u-boot shell instead of continuing the normal boot sequence [1].

Exploitation

An attacker must have physical access to the affected server. By manipulating the boot process or inducing an error condition (e.g., interrupting the boot sequence or providing malformed input), the improper error handling causes the system to present a u-boot shell prompt. No authentication is required [1].

Impact

Successful exploitation grants the attacker access to the u-boot shell, a low-level bootloader interface. From this shell, the attacker can execute arbitrary commands, read or modify firmware, alter boot parameters, and potentially achieve persistent compromise of the system. This effectively bypasses all higher-level security controls [1].

Mitigation

Dell EMC has released iDRAC firmware version 2.61.60.60 for both iDRAC7 and iDRAC8 to address this vulnerability. Users should upgrade to this version or later at the earliest opportunity. No workarounds are available. Other iDRAC models (e.g., iDRAC9) are not affected by this specific CVE [1].