Dell Device Management Agent Plaintext Password Storage Vulnerability

A vulnerability allowing plaintext storage of passwords has been identified in Dell Device Management Agent (DDMA) versions prior to 26.02. This vulnerability could be exploited by a high-privileged attacker with local access, potentially leading to unauthorized access.

Impact

Exploitation of this vulnerability could result in unauthorized access to the system.

Remediation

Users can upgrade to Dell Device Management Agent version 26.02 or later. Instructions for installing the Dell Device Management Agent on a host computer are available in a Dell knowledge base article.