The vulnerability occurs in Dell Command Update (DCU), versions before 5.7.1, due to a Missing Authorization flaw. The flaw allows a local attacker with no or very limited privileges to spoof or bypass authorization checks and gain level access. This can result in the attacker performing actions normally restricted to administrative users. The weakness is identified as CWE-862 and can compromise confidentiality, integrity, and availability of the system. The CVE score of 8.8 places it in the high severity range for privilege escalation issues.

All installations of Dell Command Update running a version older than 5.7.1 are affected. The product is distributed by Dell and is used to keep Dell firmware and drivers up to date on a local machine. No specific operating system versions are listed, so any host that runs an affected DCU version is vulnerable.

The CVSS score of 8.8 reflects a high severity of privilege escalation. The EPSS score of 0.00093 indicates a very low but non‑zero probability of exploitation. The vulnerability is not listed in CISA KEV, suggesting no known active exploitation. The attack vector is inferred to be local, requiring low‑privilege local access; once exploited, the attacker can elevate privileges to full control of the host.