CVE-2026-82163

MediumCVSS 5.5

Published: 21/09/2026(UTC)Updated: 22/09/2026(UTC)Translated: 22/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

1th percentile - higher than 1% of all known CVEs

Summary

Dell Command | Intel vPro Out of Band versions prior to 4.7.2 contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

Risk Assessment

Disclosure of sensitive information, potentially compromising out-of-band management security and enabling further attacks.

Recommendation

Update Dell Command | Intel vPro Out of Band to version 4.7.2 or later to fix default permissions.

Other vulnerabilities in Dell Command | Intel vPro Out of Band

CVE-2023-23697Medium
Dell Command | Intel vPro Out of Band versions before 4.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability, leading to arbitrary folder deletion.

Original NVD description (English source)

Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS