Impact
The vulnerability, identified as an Improper Resource Locking flaw (CWE‑413), exists in Dell OpenManage Enterprise versions older than 4.8.0. When exploited by an attacker who already has local high‑privilege access, the flaw allows bypassing built‑in protection mechanisms, potentially enabling the attacker to gain broader control over the system. This vulnerability can lead to unauthorized privilege escalation and compromise system integrity.
Affected Systems
Affected products are Dell OpenManage Enterprise, all releases prior to version 4.8.0. No specific sub‑version numbers are listed, but any installation that predates 4.8.0 remains susceptible.
Risk and Exploitability
The CVSS score is 4.7, indicating moderate severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting the likelihood of widespread exploitation is currently low. The attack requires local access with high privileges, limiting the exposure to environments where privileged accounts exist. Nonetheless, mitigating the flaw promptly reduces the risk of privilege escalation.
OpenCVE Enrichment