Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.
| Software | From | Fixed in |
|---|---|---|
| dell / idrac9_firmware | - | 6.00.30.00 |