Database/Firmware, BMC & network fabric
Dell OpenManage Enterprise: unauthenticated adjacent attacker steals a console session
Impact
This is the only issue in the advisory that needs no account: an unauthenticated attacker on the adjacent network can spoof their way past authentication and take over a console session. If the stolen session belongs to an administrator, the attacker inherits whatever that admin can do to the managed estate - inventory, firmware baselines, power control and the stored device credentials behind them. For an operator deciding what to patch first, the lack of any credential requirement makes this the one that matters most to anyone whose management VLAN is reachable by more than the infrastructure team. Dell does not describe the spoofing mechanism.
Who can reach it
Adjacent-network reach to the OpenManage Enterprise console, typically the management VLAN or a segment bridged to it. No authentication and no user interaction stated.
What to do
Upgrade to OpenManage Enterprise 4.8.0 (DSA-2026-467) - appliance update and console restart, no node maintenance. Until the upgrade, tighten what can reach the console's network segment; Dell publishes no other mitigation.
References
Related entries
- IBM Server Firmware: unauthenticated request crashes the ASMI management web serverCVE-2026-93306 · IBM Server Firmware (ASMI web interface)High
- HPE iLO 4 / iLO 5 (remote buffer overflow): Remotely triggerable buffer overflow in the iLO firmware on both the Gen9CVE-2019-11983 · HPE iLO 4 / iLO 5 (remote buffer overflow)High
- Insyde InsydeH2O (PnpSmm shared SMM/non-SMM buffer, DMA TOCTOU): A buffer shared between SMM and non-SMM codeCVE-2022-32469 · Insyde InsydeH2O (PnpSmm shared SMM/non-SMM buffer, DMA TOCTOU)High
- Insyde InsydeH2O (FwBlockServiceSmm shared buffer, DMA TOCTOU): The firmware block service's shared buffer is racy, soCVE-2022-32470 · Insyde InsydeH2O (FwBlockServiceSmm shared buffer, DMA TOCTOU)High
- Insyde InsydeH2O (IhisiSmm / IhisiDxe command buffer): One representative of a family of roughly a dozen InsydeCVE-2022-32471 · Insyde InsydeH2O (IhisiSmm / IhisiDxe command buffer)High
- Insyde InsydeH2O (HddPassword shared buffer, DMA TOCTOU): Racy shared buffer in the ATA security driverCVE-2022-32473 · Insyde InsydeH2O (HddPassword shared buffer, DMA TOCTOU)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.