Dell AIOps Collector versions prior to 1.18.3 allow an attacker with low‑privileged console access to use default credentials and obtain filesystem access. This compromise can enable the attacker to read or modify files owned by the Collector process, potentially leading to further escalation or data exposure.

Dell AIOps Collector installations earlier than version 1.18.3 that have not been upgraded. Fresh installations of those versions are impacted; systems upgraded to 1.18.3 or later are safe.

The CVSS score of 7.8 reflects significant impact but the EPSS score of less than 1% indicates a low expected exploitation rate. The vulnerability is not listed in CISA's KEV catalog. The attack requires local console access and a low‑privileged user account, making it a local privilege‑escalation style flaw rather than remote. The risk is therefore moderate but still actionable given the potential for data compromise.