What is CVE-2025-22397?

CVE-2025-22397 is a medium-severity vulnerability in Dell Idrac10, classified under Path Traversal. CVSS score: 6.7/10. Published 2025-11-06.

How severe is CVE-2025-22397?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Path Traversal in Dell Idrac10

CVE-2025-22397

Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain an Impro…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.004 (34.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H.

Affected products

Dell Idrac10
Dell Idrac10_firmware
Dell Idrac9
Dell Idrac9_firmware
Dell Integrated Remote Access Controller 10 17g Version — versions N/A
Dell Integrated Remote Access Controller 9 14g Versions — versions N/A
Dell Integrated Remote Access Controller 9 15g And 16g Versions — versions 6.10.80.00

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security_alert@emc.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2025-22397?: CVE-2025-22397 is a medium-severity vulnerability in Dell Idrac10, classified under Path Traversal. CVSS score: 6.7/10. Published 2025-11-06.
How severe is CVE-2025-22397?: Medium severity. CVSS v3 base score is 6.7 out of 10.