Incorrect Default Permissions in Dell Command | Intel vPro Out of Band
CVE-2026-82163

5.5MEDIUM

Key Information:

Vendor

Dell
Status
Command | Intel Vpro Out Of Band
Vendor
CVE Published:
21 September 2026

What is CVE-2026-82163?

Dell Command | Intel vPro Out of Band, in versions before 4.7.2, is susceptible to an Incorrect Default Permissions vulnerability. This flaw allows low-privileged attackers with local access to potentially exploit the system, which could lead to unauthorized information disclosure. It is crucial for users to update to the latest version to mitigate any associated risks. For further information, you can refer to the detailed security update available through Dell.

Affected Version(s)

Command | Intel vPro Out of Band 0 < 4.7.2

References

https://www.dell.com/support/kbdoc/en-us/000502470/dsa-20...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank saltedfish for reporting this issue.
.