Product:
Device Management Agent
Summary
Dell Device Management Agent contains a Plaintext Storage of Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access. This issue affects versions prior to 26.02.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.4 | CVE-2026-22285 |
Exploitation
To exploit this vulnerability, an attacker with high privileges and local access can retrieve stored passwords in plaintext. This could allow the attacker to gain unauthorized access to sensitive information or systems, potentially leading to further exploitation or data breaches.
Affected Products
- Device Management Agent: Affected versions prior to 26.02 contain a vulnerability that allows high privileged local attackers to access stored passwords in plaintext.
Mitigation
To mitigate this vulnerability, users should upgrade to version 26.02 or later of the Device Management Agent. Additionally, it is recommended to implement strict access controls and regularly audit local access permissions to minimize the risk of exploitation.