Description
Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
Published: 2026-09-21
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Patch
AI Analysis

Impact

Dell Command | Intel vPro Out of Band, in versions prior to 4.7.2, contains an Incorrect Default Permissions vulnerability (CWE-276). A low‑privileged attacker with local access could read data that should be protected, resulting in information disclosure.

Affected Systems

All Dell Command | Intel vPro Out of Band deployments before version 4.7.2 are affected. This includes the Intel vPro Out of Band components distributed by Dell.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate risk, but no EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, suggesting a lower exploitation probability at present. An attacker only needs local access and non‑elevated privileges; by taking advantage of the incorrect default permissions, they can disclose sensitive data stored in the affected components.

Generated by OpenCVE AI on September 21, 2026 at 19:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Download and install the Dell Command | Intel vPro Out of Band update 4.7.2 or later from Dell’s official support site.
  • If the update cannot be applied immediately, manually adjust the permissions of the affected files and directories to restrict access to privileged users only, preventing local low‑privilege reads.
  • Configure the operating system’s audit rules to trigger alerts when any of the protected files are accessed by non‑privileged users, enabling rapid detection of potential exploitation attempts.

Generated by OpenCVE AI on September 21, 2026 at 19:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 21 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 21 Sep 2026 20:15:00 +0000

Type Values Removed Values Added
Title Incorrect Default Permissions in Dell Command | Intel vPro Out Of Band Expose Sensitive Information
First Time appeared Dell
Dell command | Intel Vpro Out Of Band
Vendors & Products Dell
Dell command | Intel Vpro Out Of Band

Mon, 21 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Description Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
Weaknesses CWE-276
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Dell Command | Intel Vpro Out Of Band
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-21T19:03:05.046Z

Reserved: 2026-08-28T07:04:31.455Z

Link: CVE-2026-82163

cve-icon Vulnrichment

Updated: 2026-09-21T19:02:58.765Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-21T19:17:11.580

Modified: 2026-09-22T19:08:49.763

Link: CVE-2026-82163

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-21T20:00:13Z

Weaknesses
  • CWE-276

    Incorrect Default Permissions