Database/Firmware, BMC & network fabric
Dell OpenManage Enterprise: argument injection lets a console admin elevate privileges
Impact
Unsanitized argument delimiters passed to a command let a high-privileged remote console user elevate privileges on the OpenManage Enterprise appliance. The mechanism differs from the command-injection issues in the same advisory: here the attacker steers the arguments of a command the product already intends to run rather than appending a new one, and Dell describes the outcome as privilege elevation. On a console that manages BMCs and firmware for the fleet, this removes the boundary between application administration and the appliance itself.
Who can reach it
Network access to the OME console with an administrator-level account. Authentication required.
What to do
Upgrade to OpenManage Enterprise 4.8.0 (DSA-2026-467): appliance update and console restart, managed servers untouched. No interim mitigation is published beyond limiting who holds console admin.
References
Related entries
- Supermicro BMC: OS command injection in a management function executes on service restartCVE-2026-16521 · Supermicro BMC (IPMI/Redfish management firmware, MBD-X12STW-F)High
- Perle IOLAN STS/SCS terminal server (firmware before 6.0): A logged-in user of the restricted admin shell (TelnetCVE-2026-23759 · Perle IOLAN STS/SCS terminal server (firmware before 6.0)High
- Supermicro BMC SMTP service configuration handler on AS-2115HS-TNR and related boards: Crafted characters injectedCVE-2026-3820 · Supermicro BMC SMTP service configuration handler on AS-2115HS-TNR and related boardsHigh
- Supermicro BMC: authenticated IPMI Administrator can read and write BMC physical memory and run code on the BMC OSCVE-2026-65211 · Supermicro BMC (IPMI interface, arbitrary physical memory read/write)High
- Dell OMSA: high-privileged remote user escalates beyond their assigned OMSA roleCVE-2026-81445 · Dell OpenManage Server Administrator (privilege management, admin-level)High
- Dell OMSA: remote heap overflow gives code execution to a high-privileged accountCVE-2026-81477 · Dell OpenManage Server Administrator (remote heap-based buffer overflow)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.