Dell Alienware Command Center (AWCC) prior to version 6.12.24.0 has an improper certificate validation flaw that can lead to the disclosure of sensitive information. The weakness is due to inadequate verification of SSL/TLS certificates during application communication. An attacker who gains local or low level privileges on the affected system can exploit this flaw and access data that should otherwise be protected, resulting in compromise of confidentiality.

The vulnerability affects Dell Alienware Command Center (AWCC) versions earlier than 6.12.24.0. In particular, any installation of AWCC before the 6.12.24.0 release on Dell Alienware systems is exposed.

The CVSS score of 2.5 indicates a low severity security flaw, and the EPSS score of less than 1% signifies a very low probability of exploitation. This vulnerability is not listed in the CISA KEV catalog, indicating no known large-scale or targeted exploitation. The attack vector is local: an attacker must have at least low privileged access to the machine, so remote exploitation is not possible.