CVE-2018-11053: iSM: Dell EMC iDRAC Service Module Improper File Permission Vulnerability

Security readout for executives and security teams

Affected Dell EMC iDRAC Service Module versions can make a Linux or XenServer host's /etc/hosts file writable by any local user when the service starts. That can let a low-privileged user or process redirect traffic to unwanted or malicious destinations. Exposure is limited to systems running the affected iDRAC Service Module versions on Linux or XenServer. The attacker must already have low-privileged local user or process access to the host operating system. Treat as a moderate-priority infrastructure hygiene issue. It is not remote code execution, but it can undermine trusted traffic routing on affected server hosts if local access is abused. Mitigation focus: Identify hosts running affected Dell EMC iDRAC Service Module versions.; Review Dell advisory SLN310281 for vendor remediation guidance.; Restrict low-privileged local access to affected host operating systems..

Prepared

May 24, 2026, 18:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.