The vulnerability occurs in Dell Command Update (DCU), versions before 5.7.1, due to a Missing Authorization flaw. The flaw allows a local attacker with no or very limited privileges to spoof or bypass authorization checks and gain higher level access. This can result in the attacker performing actions normally restricted to administrative users. The weakness is identified as CWE-862 and can compromise confidentiality, integrity, and availability of the system. The CVE score of 8.8 places it in the high severity range for privilege escalation issues.

All installations of Dell Command Update running a version older than 5.7.1 are affected. The product is distributed by Dell and is used to keep Dell firmware and drivers up to date on a local machine. No specific operating system versions are listed, so any host that runs an affected DCU version is vulnerable.

The CVSS score of 8.8 reflects a high likelihood of successful exploitation and significant impact if compromised. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, suggesting no active exploitation data is known. The attack vector is inferred to be local, as the vulnerability requires an attacker with local access and low privileges. Once exploited, the attacker can elevate privileges on the affected system, potentially gaining full control over the host.