CVE-2025-22397
CVE-2025-22397
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.7EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
06 nov 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H
Productos afectados
Dell · Integrated Dell Remote Access Controller 10 17G versionDell · Integrated Dell Remote Access Controller 9 14G VersionsDell · Integrated Dell Remote Access Controller 9 15G and 16G versions¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →