EUVD-2026-80874
GHSA-gp22-336p-2v4v
Severity by source
AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Incorrect default permissions is a local weakness requiring an existing low-priv account (AV:L/PR:L), so it is local EoP without a genuine scope change; full impact on the escalated host justifies C/I/A:H.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
AnalysisAI
Incorrect default permissions in Dell Repository Manager (DRM) versions prior to 3.5.2 let an attacker who already holds a low-privileged account on a Windows host abuse misconfigured files, directories, or service resources to escalate to a higher-privileged context. Dell rates this 8.5 (High) with a remote, scope-changing vector (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H), but our independent assessment scores it 7.8 as a local privilege-escalation issue (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H): exploitation requires an existing foothold on a machine where DRM is installed, is not a default unauthenticated remote scenario, and is limited to systems running DRM below 3.5.2. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to already hold low-privileged access (PR:L) on a host where Dell Repository Manager prior to 3.5.2 is installed, and to abuse the product's incorrect default permissions on its files, directories, or service resources to influence a higher-privileged execution context. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 3.1 score of 8.5 (High) is driven by an aggressive metric combination - AV:N with scope change (S:C) and full C:H/I:H/A:H impact - but several signals argue this is a lower real-world priority than the number suggests. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade Dell Repository Manager to version 3.5.2, which is the fixed release named in Dell's advisory DSA-2026-419 (https://www.dell.com/support/kbdoc/en-us/000509459/dsa-2026-419-security-update-for-dell-repository-manager-drm-vulnerability); this is the only fully effective fix because the flaw is baked into the product's shipped default permissions. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows hosts running Dell Repository Manager (DRM) and identify any instances below version 3.5.2; begin patching critical systems first. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Repository Manager
View allDell Repository Manager, versions prior to 3.4.5, contains a Path Traversal vulnerability in API module. Rated high seve
Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module.
Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module.
Dell Repository Manager versions before 3.4.8 suffer from an uncontrolled search path vulnerability that allows local at
Dell Repository Manager, versions 3.4.2 through 3.4.4,contains a Path Traversal vulnerability in logger module. Rated me
Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Pr
Same weakness CWE-276 – Incorrect Default Permissions
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today