Technical impact
Dell PowerScale InsightIQ contains an unnecessary privilege execution flaw, allowing a high privileged local attacker to elevate their privileges further. The vulnerability is defined as CWE-250, which addresses elevation of privilege. An attacker with local access who already has significant rights could use this flaw to gain even higher privileges, potentially compromising system integrity.
Affected Systems
Affected vendor: Dell, product: PowerScale InsightIQ. Vulnerable versions include all releases from 5.0.0 through 6.2.0. No other Microsoft or third‑party products are listed.
Risk and Exploitability
The CVSS score is 6.7, indicating moderate severity, while the EPSS score is not available and the vulnerability is not listed in CISA KEV. The vulnerability requires local high‑privileged access; there is no indication that a remote attacker or attacker with lower privileges can exploit it. Given the lack of publicly reported exploit code and the local nature of the attack, the likelihood of exploitation is moderate, but any system running the affected versions should be patched promptly.
