The vulnerability resides in Dell OpenManage Enterprise versions before 4.8.0, where the system fails to properly verify cryptographic signatures. This flaw enables a local attacker with high privileged rights to manipulate signed artifacts or configuration files, ultimately granting unauthorized access to the file system. The weakness is classified as CWE‑347, which indicates improper verification of cryptographic signatures.

The affected product is Dell OpenManage Enterprise from Dell. The issue appears in all releases prior to version 4.8.0. Users that have installed older versions of the software are potentially impacted.

The CVSS score is 6.4, indicating moderate severity. The EPSS score is not available, so the current likelihood of exploitation cannot be quantified from publicly available metrics, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires local, high‑privilege access; an attacker with such access can leverage the signature verification flaw to read or modify system files. Therefore, the risk is significant for systems where privileged local users exist, but is less pronounced in environments that strictly enforce least privilege and restrict local access.