← Vulnerability feed

Vulnerability record · CVE-2018-15766 · published 11 October 2018

CVE-2018-15766: Dell encryption weak password requirements vulnerability

Dell · Encryption

On install, Dell Encryption versions prior 10.0.1 and Dell Endpoint Security Suite Enterprise versions prior 2.0.1 will overwrite and manually set the "Minimum Password Length" group policy object to a value of 1 on that device. This allows for users to bypass any existing policy for password length and potentially create insecure password on their device. This value is defined during the installation of the "Encryption Management Agent" or "EMAgent" application. There are no other known values modified.

7.5 CVSS 3.0 High EPSS 0.55% · top 56.0% CWE-521 · Weak password requirements
7.5CVSS 3.0 base score, v2 5.0
0.55%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

On install, Dell Encryption versions prior 10.0.1 and Dell Endpoint Security Suite Enterprise versions prior 2.0.1 will overwrite and manually set the "Minimum Password Length" group policy object to a value of 1 on that device. This allows for users to bypass any existing policy for password length and potentially create insecure password on their device. This value is defined during the installation of the "Encryption Management Agent" or "EMAgent" application. There are no other known values modified.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.dell.com/support/article/us/en/04/sln313561/dell-encryption-and-dell-endpoint-security-suite-enterprise-secu MitigationVendor Advisory
https://www.dell.com/support/article/us/en/04/sln313561/dell-encryption-and-dell-endpoint-security-suite-enterprise-secu MitigationVendor Advisory

Track CVE-2018-15766 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2025-36611Dell encryption link following vulnerabilityDell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access ('Link Followi…EPSS 0.14%7.8CVE-2025-36564Dell encryption link following vulnerabilityDell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially…EPSS 0.13%7.8CVE-2023-32479Dell encryption improper access control vulnerabilityDell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation v…EPSS 0.09%7.8CVE-2020-5385Dell encryption incorrect permission assignment vulnerabilityDell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of…EPSS 0.18%7.8CVE-2020-5358Dell encryption incorrect permission assignment vulnerabilityDell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to inc…EPSS 0.19%7.3CVE-2025-46637Dell encryption link following vulnerabilityDell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A local maliciou…EPSS 0.10%7.3CVE-2023-39246Dell endpoint security suite enterprise link following vulnerabilityDell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation o…EPSS 0.15%7.3CVE-2019-3745Dell encryption uncontrolled search path element vulnerabilityThe vulnerability is limited to the installers of Dell Encryption Enterprise versions prior to 10.4.0 and Dell Endpoint Security Suite Enterprise ver…EPSS 0.29%

Source: NIST National Vulnerability Database (record CVE-2018-15766), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.