EUVD-2026-62529
GHSA-p6h6-rfh8-ch8f
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local-only access with low privileges suffices to exploit permissive filesystem ACLs; full C/I/A reflects unrestricted file read and write capability with no scope change.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
AnalysisAI
Incorrect Default Permissions in Dell Command Update (DCU) exposes a local privilege escalation path on all versions prior to 5.7.1, allowing a low-privileged authenticated user to gain unauthorized read and write access to filesystem resources owned or managed by DCU. The flaw stems from overly permissive ACLs set during installation, consistent with CWE-276, and carries a CVSS 7.8 High rating reflecting full confidentiality, integrity, and availability impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an interactive or remote local session on a Windows system with Dell Command Update prior to 5.7.1 installed, authenticated as a standard low-privilege user (PR:L per CVSS vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.8 High score is well-supported by the vector: local exploitation with low privileges, no complexity barrier, and no user interaction yields full C/I/A impact on the affected host. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A low-privileged domain user on a managed Dell endpoint identifies that DCU installation directories carry permissive ACLs allowing standard-user writes. The attacker replaces a DCU executable or drops a malicious DLL into a DCU search path; when DCU runs under an elevated context - via a scheduled task or privileged service invocation - the attacker's code executes with higher privileges, granting full filesystem read/write access. … |
| Remediation | The primary fix is to upgrade Dell Command Update to version 5.7.1 or later, as directed by Dell advisory DSA-2026-309 at https://www.dell.com/support/kbdoc/en-us/000501378/dsa-2026-309-security-update-for-dell-command-update-for-multiple-vulnerabilities. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit all systems running Dell Command Update and identify which versions are prior to 5.7.1; isolate or restrict access on affected systems; notify system owners and security teams. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Dell Command Update Dcu
View allPrivilege escalation in Dell Command Update (DCU) versions prior to 5.7.1 allows a local low-privileged attacker to gain
Elevation of privileges in Dell Command Update (DCU) versions prior to 5.7.1 is achievable by a low-privileged local att
Elevation of privilege via deserialization of untrusted data affects Dell Command Update (DCU) versions prior to 5.7.1 o
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 enables a low-privileged local attacker to f
Missing Authorization in Dell Command Update (DCU) versions prior to 5.7.1 permits a low-privileged local user to invoke
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 is achievable by a local low-privileged atta
Local privilege escalation in Dell Command Update (DCU) versions prior to 5.7.1 allows a low-privileged local attacker t
XML External Entity injection in Dell Command Update (DCU) versions prior to 5.7.1 enables a local attacker with low-pri
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 allows a local low-privileged attacker to ga
Dell Command Update (DCU) versions prior to 5.7.1 expose sensitive system information to low-privileged local users, con
Same weakness CWE-276 – Incorrect Default Permissions
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today