Dell Display and Peripheral Manager (DDPM) for Windows versions before 2.3.0.17 contains an Improper Access Control flaw. A local attacker with low privileges can bypass security checks to gain higher level rights, which may allow the attacker to run arbitrary code on the affected system.

The vulnerability affects Dell DDPM Windows versions prior to 2.3.0.17. No specific service or subsystem variations are listed beyond the overall product; systems running any of these older DDPM releases are susceptible.

The CVSS base score of 7.8 indicates high severity, and while an EPSS score is not provided, the lack of a KEV listing suggests no current widespread exploitation but the potential for local actors to leverage the flaw remains substantial. The likely attack vector is local with low privileges; a user who can log on locally could exploit the improper access control to elevate privileges and execute code.