The vulnerability is an incorrect permission assignment for a critical resource that allows a low‑privileged local attacker to bypass a protection mechanism. The flaw is categorized under CWE-732 and can enable an attacker to elevate privileges or access protected functionality that should be restricted.

Dell OpenManage Enterprise versions prior to 4.8.0 are affected.

The CVSS base score of 5.5 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited public exploitation data. The attack would require local access, so the primary vector is a local attacker with low privileges who can exploit the incorrect permissions to gain higher-level access or bypass security controls.