Executive brief
Dell OpenManage Server Administrator is a remote management tool used to monitor and administer Dell servers. A heap buffer overflow vulnerability in versions prior to 11.1.0.3 could allow a high-privileged attacker with remote access to execute arbitrary code on the affected system, potentially compromising server integrity and availability.
Technical details
The vulnerability is a heap-based buffer overflow in Dell OpenManage Server Administrator versions prior to 11.1.0.3. It requires high privilege level access and network reachability to the vulnerable application. Successful exploitation could lead to arbitrary code execution with the privileges of the OMSA process. A patch is available in version 11.1.0.3 and later as indicated by the affected versions list.
Affected products
- Dell OpenManage Server Administrator prior to 11.1.0.3
Timeline
- 2026-09-17: disclosed