Dell Command Update versions prior to 5.7.1 contain an Incorrect Default Permissions flaw. An attacker with low privileges and local access could gain access to the host’s filesystem, potentially reading, modifying, or deleting files that should be protected. The vulnerability arises from improper file permission settings, allowing local users to bypass expected restrictions.

The affected product is Dell Command Update (DCU) sold by Dell. Versions earlier than 5.7.1 are impacted; any system using those older releases is at risk. The vulnerability applies to all installations of DCU that store configuration files or binaries with overly permissive permissions.

The CVSS score of 7.8 indicates a high severity for local privilege escalation. EPSS data is not available, so the likelihood of exploitation in the wild is unknown, but the issue is not listed in the CISA KEV catalog. The attack requires local access and low privileges, meaning it could be used during a lateral movement or by an insider. Because the flaw involves default permission settings, exploitation requires no special code execution; the attacker simply leverages existing files on the system.