CVE-2026-103778
MediumCVSS 6.2Summary
Dell Command | Configure (DCC) versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Risk Assessment
A local attacker may gain access to sensitive information protected by the hard-coded key. This could lead to leakage of confidential data.
Recommendation
Upgrade Dell Command | Configure to version 5.2.3.35 or later. Restrict local access to systems with DCC installed to trusted users.
Other vulnerabilities in Dell Command | Configure
See all- CVE-2026-82162High
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.
- CVE-2026-70414Medium
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
Original NVD description (English source)
Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS