Technical impact
Dell Automation Platform versions earlier than 2.0.0.0 contain a missing authorization flaw that allows an attacker with low privilege and remote access to gain higher privileges on the system. The vulnerability is a classic example of improper authorization (CWE-862) and can lead to unauthorized execution of privileged operations. It does not involve code execution or denial of service, but it gives the attacker control that can be used to compromise the platform’s integrity and confidentiality.
Affected Systems
The bug affects Dell’s Automation Platform where all releases with a version number older than 2.0.0.0 are vulnerable. No other Dell products or later releases are impacted according to the CNA data.
Risk and Exploitability
The CVSS score of 8 indicates a high severity vulnerability. The EPSS score of less than 1% means the historical probability of exploitation is low, and the flaw is not yet listed in the CISA Known Exploited Vulnerabilities catalog. The likely attack vector is remote access by a low‑privileged user who can authorize their actions due to the missing check. If exploited, the attacker can elevate their privileges, potentially leading to full control over the platform.
