CVE-2026-70412
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Dell iDRAC9 versions prior to 7.20.30.50 and Dell iDRAC10 versions prior to 1.20.60.50 contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.
Risk Assessment
The risk involves potential disclosure of sensitive data stored in memory, which could compromise confidentiality of information in server management environments.
Recommendation
It is recommended to update iDRAC9 to version 7.20.30.50 or later and iDRAC10 to version 1.20.60.50 or later as soon as possible to mitigate the vulnerability.
Original NVD description (English source)
Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.