PT-2025-27470 · Dell · Openmanage Network Integration

CVE-2025-36593

·

Published

2025-06-30

·

Updated

2025-07-03

CVSS v3.1

8.8

High

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Dell OpenManage Network Integration versions prior to 3.8
Description: The issue is related to an Authentication Bypass by Capture-replay vulnerability in the RADIUS protocol. An attacker with local network access could potentially exploit this to forge a valid protocol accept message in response to a failed authentication request, allowing them to bypass authentication.
Recommendations: For versions prior to 3.8, update to version 3.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the RADIUS protocol to minimize the risk of exploitation.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-36593

Affected Products

Openmanage Network Integration