Live Optics Collector
Monthly
Dell Live Optics Collector versions prior to 27.2.13.310 ship with a hard-coded password (CWE-259) that a locally present, low-privileged attacker can recover and abuse to expose sensitive information. Exploitation is constrained: it requires local access to a host where the Collector is installed, an existing low-privileged account (PR:L), and user interaction (UI:R), yielding high confidentiality impact but only limited integrity impact and no availability impact (CVSS 3.1 base 5.6). There is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis; Dell has published fix version 27.2.13.310 in advisory DSA-2026-339.
Dell Live Optics Collector versions prior to 27.2.13.310 ship with a hard-coded password (CWE-259) that a locally present, low-privileged attacker can recover and abuse to expose sensitive information. Exploitation is constrained: it requires local access to a host where the Collector is installed, an existing low-privileged account (PR:L), and user interaction (UI:R), yielding high confidentiality impact but only limited integrity impact and no availability impact (CVSS 3.1 base 5.6). There is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis; Dell has published fix version 27.2.13.310 in advisory DSA-2026-339.