Executive brief
Dell Command | Intel vPro Out of Band is management software that allows system administrators to remotely manage and monitor Dell computers. A misconfiguration in file or directory permissions could allow a low-privilege user on the local system to read sensitive information without authorization, potentially exposing system configuration data or credentials.
Technical details
Dell Command | Intel vPro Out of Band versions prior to 4.7.2 contain an incorrect default permissions vulnerability in proprietary code. A low-privileged attacker with local system access can read protected resources and disclose sensitive information. The vulnerability was patched in version 4.7.2 released on 07/26/2026.
Affected products
- Dell Command Intel vPro Out of Band prior to 4.7.2
Timeline
- 2026-09-21: disclosed
- 2026-07-26: patched