Dell OpenManage Network Integration Authentication Bypass Vulnerability in RADIUS Protocol

An authentication bypass vulnerability has been identified in Dell OpenManage Network Integration (OMNI) versions prior to 3.8. This vulnerability allows an attacker with local network access to exploit the RADIUS protocol by capturing and replaying messages. The attacker could forge a valid acceptance message in response to a failed authentication request, potentially bypassing authentication mechanisms.

Impact

Exploitation of this vulnerability could lead to unauthorized authentication, allowing attackers to gain access to systems or resources that should be restricted.

Remediation

Users are advised to upgrade to Dell OpenManage Network Integration version 3.8 or later.