7.0
High
CVE-2022-34396 Dell OpenManage Server Administrator (OMSA) version 10.3.0.0 and earlier contains a DLL Injection Vulnerability
Description
Dell OpenManage Server Administrator (OMSA) version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A local low privileged authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated privileges. Exploitation may lead to a complete system compromise.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenManage Server Administrator (OMSA) 10.3 | earliest → 10.3.0.0 | No fix stated |