The vulnerability is an incorrect privilege assignment that permits a low‑privileged attacker with remote access to terminate the Dell Enterprise Support connection, causing a service interruption. This flaw is classified as CWE‑266, reflecting insufficient access controls that can disrupt availability for the affected system.

Dell PowerProtect Data Manager versions earlier than 19.22 are impacted. The vulnerability applies to any installation of the product that has not been updated to 19.22 or later, regardless of environment.

The reported CVSS score of 6.3 indicates medium severity, and the EPSS score is below 1 %, suggesting a low likelihood of exploitation at present. The vulnerability is not listed in the CISA KEV catalog, which further implies no known active exploitation. However, a remote attacker with low privileges could attempt to exploit this flaw to disrupt the Enterprise Support connection if network access to the PowerProtect environment is available. The critical factors are the remote access requirement and the lack of proper privilege enforcement.