The vulnerability is an Incorrect Permission Assignment for a critical resource that enables a low‑privileged user with local access to bypass system protection mechanisms. It is classified as CWE-732 and can compromise the confidentiality and integrity of managed resources by granting unauthorized access to privileged operations.

Affected products are Dell OpenManage Enterprise versions earlier than 4.8.0. Users operating those versions should assess whether local accounts might have elevated permissions to sensitive resources.

The CVSS score of 5.5 classifies this as a moderate severity issue. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no known large‑scale exploitation yet. The required attack vector is local with low privilege, which mainly poses a risk for insiders or compromised local users. Timely remediation is advised due to the potential for unauthorized access to critical resources.