Executive brief
Dell Command | Integration Suite for System Center is software that manages Dell systems within Microsoft System Center environments. An incorrect default permissions vulnerability allows a low-privileged local user to read sensitive information on affected systems. The vulnerability requires local access and the attacker must already have user-level privileges.
Technical details
An incorrect default permissions vulnerability in Dell Command | Integration Suite for System Center versions prior to 6.7.2 allows a low-privileged local attacker to access data they should not be able to read. The vulnerability is exploitable without user interaction and requires only local network access and existing privileges. The vulnerability results in information disclosure with no impact to integrity or availability.
Affected products
- Dell Command | Integration Suite for System Center prior to 6.7.2
Timeline
- 2026-09-21: disclosed
- 2026-09-17: patched: Version 6.7.2 or later