PT-2026-145310
CVE-2026-86363
·
Published
2026-11-11
·
Updated
2026-11-11
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Dell Live Optics Collector versions prior to 27.3.13.330
Description
An issue exists where the software generates predictable Initialization Vectors (IV) when using Cipher Block Chaining (CBC) mode, a method used in block ciphers to ensure that the same plaintext encrypts to different ciphertexts. A low privileged attacker with local access could exploit this to cause information exposure.
Recommendations
Update Dell Live Optics Collector to version 27.3.13.330 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾