EUVD-2026-25901Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L
Local-only attack (AV:L) by a low-privileged user (PR:L) under specific complex conditions (AC:H); integrity is the primary impact with no confidentiality loss, consistent with CWE-272.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
AnalysisAI
Elevation of Privileges in Dell Alienware Command Center (AWCC) versions prior to 6.13.8.0 allows a local low-privileged attacker to operate beyond their intended permission level due to a CWE-272 Least Privilege Violation. The CVSS vector (AV:L/AC:H/PR:L) confirms this is a local attack requiring an existing low-privileged foothold and elevated complexity conditions, with primary impact on system integrity (I:H). No public exploit or active exploitation has been identified at time of analysis; SSVC rates exploitation as 'none' and technical impact as 'partial', consistent with the moderate 5.3 base score.
Technical ContextAI
Dell Alienware Command Center (AWCC) is a system management and performance tuning suite exclusive to Dell Alienware gaming hardware, identified by CPE cpe:2.3:a:dell:alienware_command_center_(awcc):*:*:*:*:*:*:*:*. CWE-272 (Least Privilege Violation) describes a root cause where a software component runs with or grants more permissions than are necessary for its function. In AWCC's context, this likely manifests as a privileged service, inter-process communication channel, or file/registry path accessible to low-privileged users that can be leveraged to trigger privileged operations. Note that the intelligence tags include 'Information Disclosure,' which is inconsistent with the CVSS vector's C:N (no confidentiality impact) and I:H (high integrity impact); the CWE, description, and CVSS collectively support privilege escalation as the primary concern - the 'Information Disclosure' tag should not be treated as authoritative for this vulnerability.
RemediationAI
The primary fix is to upgrade Dell Alienware Command Center to version 6.13.8.0 or later, as specified in Dell Security Advisory DSA-2026-192 (https://www.dell.com/support/kbdoc/en-us/000451018/dsa-2026-192-security-update-for-dell-alienware-command-center-6-x-for-multiple-vulnerabilities). Updates can be applied via Dell SupportAssist, the AWCC update mechanism, or manual download from Dell's support portal. If immediate patching is not possible, restrict local user access to the affected system to trusted accounts only, reducing the pool of potential low-privileged attackers. Disabling AWCC services that are not operationally required may reduce attack surface as a temporary measure, though this may affect system performance tuning features. No workaround is known to fully eliminate the privilege boundary issue short of applying the vendor patch.
Same weakness CWE-272 – Least Privilege Violation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today