EUVD-2026-81440
GHSA-c92v-5wqf-76xv
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated (PR:N) network access to OMSA, but AC:H because the attacker must first recover/leverage the static hard-coded key; unauthorized access yields full C/I/A impact within the same component (S:U).
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
AnalysisAI
Unauthenticated remote compromise of Dell OpenManage Server Administrator (OMSA) managed-node installations running versions prior to 11.1.0.3, across Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04, is possible through a hard-coded cryptographic key embedded in the product (CWE-321). Because the same key is shared across every installation, an attacker who recovers it from any single copy can reuse it against all unpatched OMSA managed nodes that are reachable on the network, yielding full loss of confidentiality, integrity, and availability (CVSS 3.1 8.1 High, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) without valid credentials and without user interaction. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires network reachability to a Dell OpenManage Server Administrator managed-node instance running a version prior to 11.1.0.3 (Windows patch build, RHEL 8.10, RHEL 9.4, SLES 15, or Ubuntu 22.04). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H = 8.1 High) describes an unauthenticated, remotely reachable flaw with full confidentiality/integrity/availability impact but elevated attack complexity (AC:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Dell OpenManage Server Administrator to version 11.1.0.3 or later on every managed node; this is the vendor-released fix and is the only complete remedy for a hard-coded-key defect, since the static key cannot be rotated by configuration. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all OMSA managed-node installations and identify any running versions prior to 11.1.0.3 on Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04, then immediately restrict network access to OMSA management interfaces (e.g., TCP 1311) to trusted management VLANs or jump hosts and enable detailed logging. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated remote code execution is possible against Dell OpenManage Server Administrator (OMSA) managed nodes runn
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a rem
Privilege escalation and information tampering in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allow
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authent
Unauthenticated path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote a
Server-side request forgery in Dell OpenManage Server Administrator versions prior to 11.1.0.3 lets remote, unauthentica
Information disclosure in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allows a locally authenticated
Hard-coded credentials in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 let an unaut
Elevation of privilege in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 l
Remote code execution in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3: a hea
Improper TLS certificate validation in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3
Same weakness CWE-321 – Use of Hard-coded Cryptographic Key
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today