Dell Integrated Dell Remote Access Controller firmware versions prior to 7.00.00.174 (9 and 14G) and 7.10.90.00 (15G and 16G) contain sensitive debug information that is not properly cleared. This leads to an exposure of sensitive system information. The vulnerability is categorized as CWE-1258, which indicates inappropriate inclusion of debug data that can expose confidential information. As a result, an attacker can potentially retrieve sensitive data, compromising confidentiality of the device and potentially the host system it manages.

Dell iDRAC9 and iDRAC10 firmware releases from the 9 and 14G family before 7.00.00.174 and from the 15G and 16G family before 7.10.90.00 are affected. These include all deployments of the Integrated Dell Remote Access Controller that run the specified firmware versions on Dell servers.

The CVSS score of 4.9 indicates a low‑to‑moderate severity. The description confirms that a high privileged attacker with remote access can exploit the flaw. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting it is not widely exploited yet. However, the attacker must have remote access and elevated privileges to the iDRAC interface to retrieve the exposed debug data, which suggests a targeted attack rather than mass exploitation.