Dell System Update, versions earlier than 2.3.0.0 contain an improper certificate validation flaw that allows a high‑privileged attacker with remote access to circumvent trusted certificate checks. By supplying a forged or otherwise invalid certificate, the attacker can force the application to perform privileged operations, resulting in remote code execution on the vulnerable host.

The vulnerability affects Dell System Update installations, specifically all releases before 2.3.0.0. Systems running these earlier versions are at risk regardless of other security controls.

The CVSS score of 7.6 indicates a high impact if exploited, while the lack of an EPSS score and absence from the CISA KEV list suggest limited public exploitation data at present. Nevertheless, the requirement for a high‑privileged attacker with remote reach, combined with the potential for full system compromise, keeps the risk substantial and warrants urgent attention.