Medium severity6.7NVD Advisory· Published Nov 6, 2025· Updated Jun 17, 2026

CVE-2025-22397

Description

Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Idrac10 Firmware
cpe:2.3:o:dell:idrac10_firmware:*:*:*:*:*:*:*:*
Range: <1.20.25.00
Dell/Idrac9 Firmware
cpe:2.3:o:dell:idrac9_firmware:*:*:*:*:*:*:*:*
Range: >=6.10.80.00,<7.00.00.181
Dell/Integrated Dell Remote Access Controller 9llm-create2 versions
<7.00.00.181+ 1 more
- (no CPE)range: <7.00.00.181
- (no CPE)range: 6.10.80.00
Dell/Integrated Remote Access Controller Firmwarecpe-rescue2 versions
N/A+ 1 more
- (no CPE)range: N/A
- (no CPE)range: N/A

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000384516/dsa-2025-376-security-update-for-dell-idrac9-and-idrac10-vulnerabilitiesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000