Skip to content
Sign in
2.4 Low

CVE-2026-82154 Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability

Description

Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

CVSS 3.1 detail

Vector CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitable with physical access to the machine, without an account and without any user action; the impact on data or service is limited.

Attack vector
Physical
Attack complexity
Low
Privileges required
None
Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Affected products and versions

Product Affected versions Fixed in
OS Recovery Tool 2.4 earliest → < 2.4.4 2.4.4

Other CVEs of OS Recovery Tool

The 3 CVEs of OS Recovery Tool →
CVE-2026-82155 Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability 7.8 High CVE-2026-82153 Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability 2.2 Low
Track this CVE