EUVD-2026-25897Severity by source
AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Local-only attack (AV:L), non-trivial precondition (AC:H), low-privilege account required (PR:L), user interaction needed (UI:R); full system compromise if successful but no scope change (S:U).
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain an Execution with Unnecessary Privileges vulnerability in the AWCC. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
AnalysisAI
Elevation of Privileges in Dell Alienware Command Center (AWCC) versions prior to 6.13.8.0 allows a local low-privileged attacker to gain full system access by exploiting a component that executes with unnecessarily elevated rights (CWE-250). The attack requires high complexity and user interaction (CVSS AV:L/AC:H/PR:L/UI:R), placing real-world exploitability well below the theoretical maximum despite the total technical impact assessed by SSVC. No public exploit exists and EPSS places this in the 2nd percentile, confirming no public exploitation activity at time of analysis. Dell has released a fix in AWCC 6.13.8.0.
Technical ContextAI
Dell Alienware Command Center is a system management and hardware-tuning utility pre-installed on Alienware gaming PCs, responsible for controlling RGB lighting, thermal profiles, and overclocking settings. It typically runs service components with SYSTEM or elevated privileges to interface with hardware drivers. CWE-250 (Execution with Unnecessary Privileges) indicates that one or more AWCC components retain elevated privileges beyond what their function requires, creating a privilege escalation surface for lower-privileged processes or users. The CPE cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:* confirms all AWCC versions across the 6.x branch are affected until the 6.13.8.0 threshold. This class of vulnerability is common in OEM system utilities that bridge user-space configuration with kernel-level hardware control.
RemediationAI
Upgrade Dell Alienware Command Center to version 6.13.8.0 or later, which is the vendor-confirmed patched release per Dell advisory DSA-2026-192 at https://www.dell.com/support/kbdoc/en-us/000451018/dsa-2026-192-security-update-for-dell-alienware-command-center-6-x-for-multiple-vulnerabilities. Updates can be applied via the Dell Update utility, SupportAssist, or manually from the Dell support portal. As a compensating control prior to patching, restrict local interactive login access to trusted users only, as the vulnerability requires a low-privileged local account - removing unnecessary local accounts reduces the attacker population. Monitoring for unexpected privilege escalation events in Windows Event Log (event IDs 4672, 4673) can serve as a detection measure. Note that disabling AWCC entirely may impact hardware management functionality including thermal controls, which could affect system stability under load on Alienware hardware.
More in Alienware Command Center
View allDell Alienware Command Center, version 5.7.3.0 and prior, contains an improper access control vulnerability. Rated high
Dell Alienware Command Center, versions prior to 6.2.7.0, contain an uncontrolled search path element vulnerability. Rat
Dell Alienware Command Center, versions prior to 5.5.51.0, contain a deserialization of untrusted data vulnerability. Ra
Alienware Command Center Application, versions 5.5.43.0 and prior, contain an improper access control vulnerability. Rat
Dell Alienware Command Center versions 5.5.37.0 and prior contain an Improper Input validation vulnerability. Rated high
Dell Alienware Command Center 6.x, versions prior to 6.7.37.0 contain an Improper Access Control Vulnerability. Rated me
Dell Alienware Command Center 5.x (AWCC), versions prior to 5.10.2.0, contains an Improper Link Resolution Before File A
Dell Alienware Command Center, versions 5.5.52.0 and prior, contain improper access control vulnerability, leading to De
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability. Rated lo
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without Ac
Same weakness CWE-250 – Execution with Unnecessary Privileges
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today