Dell Command Update (DCU) versions before 5.7.1 contain an Incorrect Authorization flaw that allows a local user with low privileges to bypass access controls and gain higher level permissions on the affected system. The vulnerability enables local attackers to execute privileged actions, potentially compromising system integrity and control.

The affected product is Dell Command Update (DCU) from Dell. All installations with a version less than 5.7.1 are vulnerable. Version 5.7.1 and later contain the fix.

The CVSS base score of 5.5 indicates moderate severity. The EPSS score is < 1%, indicating a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access and a low‑privileged account; once accessed, an attacker can elevate privileges to administrator or elevated user and potentially perform further malicious actions. The overall risk remains moderate due to the severity of the privilege escalation, but the likelihood of exploitation is low in environments where local user accounts are not tightly controlled.