PT-2025-27470 · Dell · Openmanage Network Integration

Published 2025-06-30 · Updated 2025-07-03 · CVE-2025-36593

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Network Integration versions prior to 3.8

Description: The issue is related to an Authentication Bypass by Capture-replay vulnerability in the RADIUS protocol. An attacker with local network access could potentially exploit this to forge a valid protocol accept message in response to a failed authentication request, allowing them to bypass authentication.

Recommendations: For versions prior to 3.8, update to version 3.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the RADIUS protocol to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2025-36593

Affected Products

Openmanage Network Integration

References · 8

• https://osv.dev/vulnerability/CVE-2025-36593 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000337238/dsa-2025-257-security-update-for-dell-openmanage-network-integration-omni-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36593 · Security Note
• https://t.me/cvenotify/127611 · Telegram Post
• https://twitter.com/CveFindCom/status/1939763486139068913 · Twitter Post
• https://twitter.com/CVEnew/status/1939764123442565382 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1939864089125167551 · Twitter Post
• https://t.me/cvetracker/27455 · Telegram Post