Openmanage Server Administrator Managed Node For Sles 15
Monthly
Information disclosure in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allows a locally authenticated low-privileged attacker to read sensitive data, potentially including credentials or configuration details, with high confidentiality impact. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N, base 7.3) requires local access and an existing low-privileged account, but no user interaction and low complexity. No public exploit code or confirmed active exploitation was identified at time of analysis.
Server-side request forgery in Dell OpenManage Server Administrator versions prior to 11.1.0.3 lets remote, unauthenticated attackers who can induce a user interaction coerce the management agent into issuing requests to attacker-chosen internal or external targets, exposing sensitive internal services such as management APIs and cloud metadata endpoints. The flaw (CWE-918) is rated CVSS 3.1 7.4 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N), with the scope-change and confidentiality-high components reflecting that forged traffic escapes the OMSA trust boundary while integrity and availability are unaffected. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at the time of analysis, and real-world impact depends on the OMSA web interface being network-reachable and the managed host having line-of-sight to valuable internal targets.
Elevation of privilege in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 lets a network-positioned attacker who already holds high privileges escalate to full control of the managed node, with high impact to confidentiality, integrity, and availability (CVSS 3.1 base 7.2). The underlying weakness is improper privilege management (CWE-269) reachable over the OMSA network management interface with low complexity and no user interaction, affecting Windows managed-node patch installations as well as managed nodes on RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04. No public exploit has been identified at time of analysis; the dominant limiting factor is the PR:H precondition, meaning anonymous or low-privileged remote attackers cannot trigger this issue.
Privilege escalation and information tampering in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allow a low-privileged authenticated remote attacker to modify data and gain unauthorized access through improper privilege management. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H, base 8.1) indicates network reachability with low attack complexity, requiring only low privileges and no user interaction, and resulting in high integrity and availability impact with no confidentiality loss. No public exploit identified at time of analysis.
Unauthenticated path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote attacker read arbitrary files from the managed node's filesystem. The flaw is reachable over the network with no credentials, no user interaction, and no special configuration (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, 7.5), but impact is confidentiality-only: an attacker can exfiltrate files, not modify them or disrupt the service. All shipped managed-node platforms are affected (Windows patch bundle, RHEL 8.10, RHEL 9.4, SLES 15, Ubuntu 22.04); no public exploit identified at time of analysis and the vulnerability has not been confirmed actively exploited (CISA KEV), so practical risk tracks directly with how broadly the OMSA management interface is reachable.
Hard-coded credentials in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 let an unauthenticated remote attacker bypass authentication and obtain unauthorized access to the affected service. The flaw affects the managed-node packages on Windows, RHEL 8.10 and 9.4, SLES 15 and Ubuntu 22.04, and because the credential is baked into the product itself, no special configuration or user interaction is required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N, base score 7.3). No public exploit code and no confirmed active exploitation have been identified at time of analysis, although the practical risk depends heavily on whether the OMSA management interface is reachable from an untrusted network - assessed impact is bounded to Low confidentiality, integrity and availability (C:L/I:L/A:L).
Unauthenticated remote compromise of Dell OpenManage Server Administrator (OMSA) managed-node installations running versions prior to 11.1.0.3, across Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04, is possible through a hard-coded cryptographic key embedded in the product (CWE-321). Because the same key is shared across every installation, an attacker who recovers it from any single copy can reuse it against all unpatched OMSA managed nodes that are reachable on the network, yielding full loss of confidentiality, integrity, and availability (CVSS 3.1 8.1 High, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) without valid credentials and without user interaction. The elevated attack complexity reflects the non-trivial prerequisite of obtaining or leveraging the static key rather than a barrier to entry once it is known; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the vendor has released a fixed build.
Remote code execution in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3: a heap-based buffer overflow (CWE-122) that an attacker holding administrator-level privileges on the OMSA service can trigger over the network without user interaction, gaining code execution on the managed host with full confidentiality, integrity, and availability impact. The flaw scores 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) and affects Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 managed nodes. No public exploit code and no confirmed active exploitation were identified at time of analysis; the high-privilege prerequisite keeps this a privileged-user-to-code-execution escalation rather than a pre-authentication internet-facing exploit, with risk rising where OMSA is exposed to untrusted networks or chained after an authentication bypass such as CVE-2026-81475 in the same DSA-2026-403 bundle.
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 allows a network-reachable attacker to run arbitrary operating-system commands on the host, yielding full confidentiality, integrity, and availability impact (CVSS 8.1, C:H/I:H/A:H, CWE-78). Affected deployments include the Windows managed-node patch build and the managed-node packages for RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04; the vendor rates attack complexity as high (AC:H), so successful exploitation hinges on a specific non-default condition, timing, or crafted-input constraint rather than a single trivial request. No public exploit code has been identified at time of analysis and the flaw is not listed in CISA KEV, while hosts already updated to 11.1.0.3 are not affected.
Unauthenticated remote code execution is possible against Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3, where a critical management function can be invoked without any authentication check (CWE-306). Affected deployments include the Windows managed-node patch plus managed-node builds for RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04, and an attacker who can reach the OMSA management interface from the network needs no credentials and no user interaction (CVSS 8.1, PR:N/UI:N), though the AC:H rating indicates the exploit path depends on conditions outside the attacker's control and is not a simple one-shot request. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV, so real-world risk is currently gated mainly by whether OMSA is exposed beyond a trusted management VLAN rather than by known exploitation.
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authenticated local attacker with low privileges to corrupt process memory and escalate to full root/SYSTEM-level control of the managed node. Only hosts with the OMSA managed-node component installed and running are affected, across Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 packages. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 7.8 High) confirms a local elevation-of-privilege primitive requiring an existing local account but no user interaction; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the advisory's 'network access' title does not imply an unauthenticated remote path for this CVE.
Improper TLS certificate validation in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 allows an unauthenticated attacker who already occupies an adjacent-network position (same LAN or management VLAN) to man-in-the-middle OMSA traffic and accept a forged or invalid server certificate, resulting in disclosure and tampering of management data. The CVSS 3.1 vector (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N, score 6.8) confirms adjacent access and high attack complexity are required but no credentials or user interaction are needed once a MITM foothold exists; the issue is limited to the local management plane and cannot be triggered from the public internet. No public exploit code has been identified and the flaw is not in CISA KEV, so this is a moderate-real-risk hardening issue rather than an emergency, with the primary fix being the vendor release 11.1.0.3.
Server-side request forgery in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3 allows an authenticated low-privileged user to make the management server issue attacker-influenced outbound requests on their behalf. Dell rates the issue CVSS 6.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N), reflecting a network-reachable flaw that requires a valid low-privileged session but no user interaction, with the scope change indicating impact can extend to resources beyond the OMSA component itself. Only managed-node builds on Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 below 11.1.0.3 are affected, and no public exploit identified at time of analysis. Because the flaw is reachable from the network but gated behind authentication, exploitation is most plausible from an already-compromised low-privileged account or an insider on a segment that can reach the OMSA console.
Cross-site request forgery in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote unauthenticated attacker ride an already-authenticated administrator's browser session and forge state-changing requests against the managed-node web interface, yielding limited integrity and availability impact (CVSS 3.1 5.4, Medium) rather than the code execution implied by the description's 'Remote execution' phrasing. The attacker needs no credentials (PR:N), but success depends on an OMSA administrator with an active session being induced to visit an attacker-controlled page or click a crafted link (UI:R), and the forged action only works while that session remains valid. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, so the near-term risk is opportunistic rather than confirmed active exploitation.
Denial of service in Dell OpenManage Server Administrator (OMSA) managed node versions prior to 11.1.0.3 allows a low-privileged local user on an affected server to crash or disrupt the OMSA agent by supplying input that triggers a flawed partial string comparison. The issue is scored CVSS 5.8 (AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H), meaning the attacker must already hold a valid low-privilege foothold on the host, high attack complexity applies because the malformed input must be crafted to specifically exercise the comparison flaw, and the realistic impact ceiling is denial of service rather than host compromise. No public exploit code and no confirmed active exploitation were identified at time of analysis, and Dell has released a fix in OMSA 11.1.0.3; this is a moderate, locally-scoped issue that does not warrant emergency prioritization.
An incorrect authorization flaw in Dell OpenManage Server Administrator (OMSA) affects managed node installations prior to version 11.1.0.3, allowing a low-privileged, authenticated remote user to bypass an intended protection mechanism and gain limited unauthorized read and modification of data on the managed node. Exploitation is significantly gated: per the CVSS vector (AV:N/AC:H/PR:L/UI:R) the attacker must already hold a valid low-privilege OMSA account, a non-trivial timing or configuration condition must be satisfied (AC:H), and a legitimate operator must be induced to perform an action (UI:R), which is why the overall score is only 3.7 and severity is low. There is no confirmed active exploitation (no CISA KEV listing) and no public exploit identified at time of analysis; the primary fix is OMSA 11.1.0.3 as documented in Dell security advisory DSA-2026-403.
Information disclosure in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 stems from use of a broken or risky cryptographic algorithm in the product's network communication, which an unauthenticated remote attacker could leverage to expose limited information (CVSS 3.1: 3.7, AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). The high attack-complexity metric indicates that realistic exploitation requires a privileged man-in-the-middle position on the path to the managed node or offline cryptanalysis of captured management traffic, not a single direct request, and there is no integrity or availability impact. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, consistent with the independent assessment that this is a genuinely low-priority exposure typically confined to internal or out-of-band management networks. Affected platforms include the Windows managed-node patch and managed-node builds for RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04.
Information disclosure in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allows a locally authenticated low-privileged attacker to read sensitive data, potentially including credentials or configuration details, with high confidentiality impact. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N, base 7.3) requires local access and an existing low-privileged account, but no user interaction and low complexity. No public exploit code or confirmed active exploitation was identified at time of analysis.
Server-side request forgery in Dell OpenManage Server Administrator versions prior to 11.1.0.3 lets remote, unauthenticated attackers who can induce a user interaction coerce the management agent into issuing requests to attacker-chosen internal or external targets, exposing sensitive internal services such as management APIs and cloud metadata endpoints. The flaw (CWE-918) is rated CVSS 3.1 7.4 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N), with the scope-change and confidentiality-high components reflecting that forged traffic escapes the OMSA trust boundary while integrity and availability are unaffected. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at the time of analysis, and real-world impact depends on the OMSA web interface being network-reachable and the managed host having line-of-sight to valuable internal targets.
Elevation of privilege in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 lets a network-positioned attacker who already holds high privileges escalate to full control of the managed node, with high impact to confidentiality, integrity, and availability (CVSS 3.1 base 7.2). The underlying weakness is improper privilege management (CWE-269) reachable over the OMSA network management interface with low complexity and no user interaction, affecting Windows managed-node patch installations as well as managed nodes on RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04. No public exploit has been identified at time of analysis; the dominant limiting factor is the PR:H precondition, meaning anonymous or low-privileged remote attackers cannot trigger this issue.
Privilege escalation and information tampering in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allow a low-privileged authenticated remote attacker to modify data and gain unauthorized access through improper privilege management. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H, base 8.1) indicates network reachability with low attack complexity, requiring only low privileges and no user interaction, and resulting in high integrity and availability impact with no confidentiality loss. No public exploit identified at time of analysis.
Unauthenticated path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote attacker read arbitrary files from the managed node's filesystem. The flaw is reachable over the network with no credentials, no user interaction, and no special configuration (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, 7.5), but impact is confidentiality-only: an attacker can exfiltrate files, not modify them or disrupt the service. All shipped managed-node platforms are affected (Windows patch bundle, RHEL 8.10, RHEL 9.4, SLES 15, Ubuntu 22.04); no public exploit identified at time of analysis and the vulnerability has not been confirmed actively exploited (CISA KEV), so practical risk tracks directly with how broadly the OMSA management interface is reachable.
Hard-coded credentials in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 let an unauthenticated remote attacker bypass authentication and obtain unauthorized access to the affected service. The flaw affects the managed-node packages on Windows, RHEL 8.10 and 9.4, SLES 15 and Ubuntu 22.04, and because the credential is baked into the product itself, no special configuration or user interaction is required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N, base score 7.3). No public exploit code and no confirmed active exploitation have been identified at time of analysis, although the practical risk depends heavily on whether the OMSA management interface is reachable from an untrusted network - assessed impact is bounded to Low confidentiality, integrity and availability (C:L/I:L/A:L).
Unauthenticated remote compromise of Dell OpenManage Server Administrator (OMSA) managed-node installations running versions prior to 11.1.0.3, across Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04, is possible through a hard-coded cryptographic key embedded in the product (CWE-321). Because the same key is shared across every installation, an attacker who recovers it from any single copy can reuse it against all unpatched OMSA managed nodes that are reachable on the network, yielding full loss of confidentiality, integrity, and availability (CVSS 3.1 8.1 High, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) without valid credentials and without user interaction. The elevated attack complexity reflects the non-trivial prerequisite of obtaining or leveraging the static key rather than a barrier to entry once it is known; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the vendor has released a fixed build.
Remote code execution in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3: a heap-based buffer overflow (CWE-122) that an attacker holding administrator-level privileges on the OMSA service can trigger over the network without user interaction, gaining code execution on the managed host with full confidentiality, integrity, and availability impact. The flaw scores 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) and affects Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 managed nodes. No public exploit code and no confirmed active exploitation were identified at time of analysis; the high-privilege prerequisite keeps this a privileged-user-to-code-execution escalation rather than a pre-authentication internet-facing exploit, with risk rising where OMSA is exposed to untrusted networks or chained after an authentication bypass such as CVE-2026-81475 in the same DSA-2026-403 bundle.
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 allows a network-reachable attacker to run arbitrary operating-system commands on the host, yielding full confidentiality, integrity, and availability impact (CVSS 8.1, C:H/I:H/A:H, CWE-78). Affected deployments include the Windows managed-node patch build and the managed-node packages for RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04; the vendor rates attack complexity as high (AC:H), so successful exploitation hinges on a specific non-default condition, timing, or crafted-input constraint rather than a single trivial request. No public exploit code has been identified at time of analysis and the flaw is not listed in CISA KEV, while hosts already updated to 11.1.0.3 are not affected.
Unauthenticated remote code execution is possible against Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3, where a critical management function can be invoked without any authentication check (CWE-306). Affected deployments include the Windows managed-node patch plus managed-node builds for RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04, and an attacker who can reach the OMSA management interface from the network needs no credentials and no user interaction (CVSS 8.1, PR:N/UI:N), though the AC:H rating indicates the exploit path depends on conditions outside the attacker's control and is not a simple one-shot request. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV, so real-world risk is currently gated mainly by whether OMSA is exposed beyond a trusted management VLAN rather than by known exploitation.
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authenticated local attacker with low privileges to corrupt process memory and escalate to full root/SYSTEM-level control of the managed node. Only hosts with the OMSA managed-node component installed and running are affected, across Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 packages. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 7.8 High) confirms a local elevation-of-privilege primitive requiring an existing local account but no user interaction; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the advisory's 'network access' title does not imply an unauthenticated remote path for this CVE.
Improper TLS certificate validation in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 allows an unauthenticated attacker who already occupies an adjacent-network position (same LAN or management VLAN) to man-in-the-middle OMSA traffic and accept a forged or invalid server certificate, resulting in disclosure and tampering of management data. The CVSS 3.1 vector (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N, score 6.8) confirms adjacent access and high attack complexity are required but no credentials or user interaction are needed once a MITM foothold exists; the issue is limited to the local management plane and cannot be triggered from the public internet. No public exploit code has been identified and the flaw is not in CISA KEV, so this is a moderate-real-risk hardening issue rather than an emergency, with the primary fix being the vendor release 11.1.0.3.
Server-side request forgery in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3 allows an authenticated low-privileged user to make the management server issue attacker-influenced outbound requests on their behalf. Dell rates the issue CVSS 6.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N), reflecting a network-reachable flaw that requires a valid low-privileged session but no user interaction, with the scope change indicating impact can extend to resources beyond the OMSA component itself. Only managed-node builds on Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 below 11.1.0.3 are affected, and no public exploit identified at time of analysis. Because the flaw is reachable from the network but gated behind authentication, exploitation is most plausible from an already-compromised low-privileged account or an insider on a segment that can reach the OMSA console.
Cross-site request forgery in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote unauthenticated attacker ride an already-authenticated administrator's browser session and forge state-changing requests against the managed-node web interface, yielding limited integrity and availability impact (CVSS 3.1 5.4, Medium) rather than the code execution implied by the description's 'Remote execution' phrasing. The attacker needs no credentials (PR:N), but success depends on an OMSA administrator with an active session being induced to visit an attacker-controlled page or click a crafted link (UI:R), and the forged action only works while that session remains valid. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, so the near-term risk is opportunistic rather than confirmed active exploitation.
Denial of service in Dell OpenManage Server Administrator (OMSA) managed node versions prior to 11.1.0.3 allows a low-privileged local user on an affected server to crash or disrupt the OMSA agent by supplying input that triggers a flawed partial string comparison. The issue is scored CVSS 5.8 (AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H), meaning the attacker must already hold a valid low-privilege foothold on the host, high attack complexity applies because the malformed input must be crafted to specifically exercise the comparison flaw, and the realistic impact ceiling is denial of service rather than host compromise. No public exploit code and no confirmed active exploitation were identified at time of analysis, and Dell has released a fix in OMSA 11.1.0.3; this is a moderate, locally-scoped issue that does not warrant emergency prioritization.
An incorrect authorization flaw in Dell OpenManage Server Administrator (OMSA) affects managed node installations prior to version 11.1.0.3, allowing a low-privileged, authenticated remote user to bypass an intended protection mechanism and gain limited unauthorized read and modification of data on the managed node. Exploitation is significantly gated: per the CVSS vector (AV:N/AC:H/PR:L/UI:R) the attacker must already hold a valid low-privilege OMSA account, a non-trivial timing or configuration condition must be satisfied (AC:H), and a legitimate operator must be induced to perform an action (UI:R), which is why the overall score is only 3.7 and severity is low. There is no confirmed active exploitation (no CISA KEV listing) and no public exploit identified at time of analysis; the primary fix is OMSA 11.1.0.3 as documented in Dell security advisory DSA-2026-403.
Information disclosure in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 stems from use of a broken or risky cryptographic algorithm in the product's network communication, which an unauthenticated remote attacker could leverage to expose limited information (CVSS 3.1: 3.7, AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). The high attack-complexity metric indicates that realistic exploitation requires a privileged man-in-the-middle position on the path to the managed node or offline cryptanalysis of captured management traffic, not a single direct request, and there is no integrity or availability impact. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, consistent with the independent assessment that this is a genuinely low-priority exposure typically confined to internal or out-of-band management networks. Affected platforms include the Windows managed-node patch and managed-node builds for RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04.