Dell OpenManage Network Manager 6.2.0.51 SP3 Privilege Escalation

Posted on 07 November 2018

Dell OpenManage Network Manager exposes a MySQL listener that can be accessed with default credentials. This MySQL service is running as the root user, so an attacker can exploit this configuration to, e.g., deploy a backdoor and escalate privileges into the root account.