Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior…
Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Dell Technologies
- Product
- iDRAC Service Module for Windows, iDRAC Service Module for Linux, iDRAC Service Module for ESXi
- CVSS v3.1
- 4.2 AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- Weakness
- CWE-94
- Exposure class
- Hypervisor, Storage / NAS
- NVD status
- Received
Why it ranks 23 (Routine)
- CVSS v3.1 4.2 medium
- Exposed product class: hypervisor
- Widely deployed vendor product (Dell Technologies)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-81472 on this site · NVD · CVE.org · Vulnpedia