Dell OpenManage Enterprise: no limit on authentication attempts against the console

CVSS 5.4CVE-2026-111501Firmware, BMC & network fabriccurated

Impact

The OME login path does not restrict excessive authentication attempts, so an unauthenticated party on the management network can grind credentials against the console that holds fleet-wide iDRAC and firmware-update authority. Dell scores the outcome as enabling phishing (5.4, low confidentiality and integrity impact) rather than guaranteed account compromise, so treat this as an exposure that makes password guessing and credential-stuffing against OME accounts practical, not as a direct break-in. It matters mainly where OME shares a password with directory accounts or where local OME admin passwords are weak, because an OME admin account is a route to every BMC it manages.

Who can reach it

Unauthenticated attacker with adjacent network access to the OME appliance's web interface. No credentials and no user interaction needed to start attempting them.

What to do

Upgrade the OME appliance to 4.8.0 per Dell DSA-2026-467 - an appliance service restart, no impact on managed GPU nodes. Independently worth doing regardless of version: front OME with an identity provider that does its own lockout, and restrict the appliance to an administrative jump host.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-111501 https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.