EUVD-2026-81614
GHSA-fxpj-q7f5-82mj
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Network-reachable OMSA interface (AV:N/AC:L), needs existing low-privileged account (PR:L), no UI; improper privilege management enables tampering and disruption (I:H/A:H) with no confidentiality loss (C:N) per vendor.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.
AnalysisAI
Privilege escalation and information tampering in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allow a low-privileged authenticated remote attacker to modify data and gain unauthorized access through improper privilege management. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H, base 8.1) indicates network reachability with low attack complexity, requiring only low privileges and no user interaction, and resulting in high integrity and availability impact with no confidentiality loss. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a low-privileged authenticated foothold (PR:L) with network access to the Dell OpenManage Server Administrator management interface (the OMSA managed-node web service, typically TCP 1311) on an affected version prior to 11.1.0.3. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H, base 8.1) describes a network-reachable, low-complexity flaw needing only low privileges and no user interaction, yielding high integrity and availability impact with no confidentiality loss - consistent with CWE-269 Improper Privilege Management where an already-authenticated low-privileged user tampers with data and escalates access. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patch by upgrading Dell OpenManage Server Administrator to version 11.1.0.3 or later on all affected managed-node platforms (Windows patch build, RHEL 8.10/9.4, SLES 15, Ubuntu 22.04). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, restrict network access to Dell OpenManage Server Administrator (OMSA) management interfaces to trusted management networks only, enforce least privilege and multi-factor authentication for all OMSA accounts, and enable detailed logging and monitoring for privilege changes or anomalous activity. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated remote code execution is possible against Dell OpenManage Server Administrator (OMSA) managed nodes runn
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a rem
Unauthenticated remote compromise of Dell OpenManage Server Administrator (OMSA) managed-node installations running vers
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authent
Unauthenticated path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote a
Server-side request forgery in Dell OpenManage Server Administrator versions prior to 11.1.0.3 lets remote, unauthentica
Information disclosure in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allows a locally authenticated
Hard-coded credentials in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 let an unaut
Elevation of privilege in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 l
Remote code execution in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3: a hea
Improper TLS certificate validation in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today