EUVD-2026-115549
GHSA-p6p5-9qcr-hm7w
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain low-privileged local account on host
-
ExploitTarget AWCC improper privilege management flaw
-
ExecutionExecute privilege-escalation action
-
ImpactGain elevated/system privileges
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2025 - Insecure Design
ASVS 5.0
V8 - Authorization Least privilege enforcement
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires local access to a Windows host with Dell Alienware Command Center installed at a version prior to 6.14.54.0, and the attacker must already possess a low-privileged local account (PR:L) - it is not remotely reachable (AV:L) and needs no user interaction (UI:N). Exploitation is limited to systems where this specific AWCC gaming software is deployed, typically Alienware/Dell gaming PCs; the exact feature or component abused for escalation is not described in the available sources. The limiting factors are the local-only vector and the need for a pre-existing authenticated foothold. |
| Impact | This is a locally-exploitable privilege escalation (CWE-269) in Dell Alienware Command Center, rated CVSS 7.8 with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The signals are internally consistent: the vector confirms a local attack path (AV:L), low attack complexity (AC:L), and an already-authenticated low-privileged user (PR:L) with no user interaction, yielding full confidentiality, integrity, and availability impact after escalation. There is no CISA KEV listing and no POC or exploit reference in the supplied data, so exploitation status is 'no public exploit identified at time of analysis' - the 7.8 reflects impact severity, not demonstrated attacker activity. No EPSS score was provided, so widespread-exploitation probability cannot be quantified. SSVC-style fields (automatable, technical impact) were not supplied beyond the vendor priority label 'this_week', which signals a prompt-but-not-emergency remediation cadence. Net: this is a genuine local EoP worth patching on a near-term schedule, but it is not a drive-by or remote-mass-exploitation threat - it requires an attacker to already hold a foothold as a low-privileged local user on an affected host. |
| Exploit ScenarioDerived | An attacker who already has a low-privileged local account (or has landed low-privileged code via phishing or another bug) on a machine running Alienware Command Center before 6.14.54.0 abuses the improper privilege management flaw to elevate to higher/system privileges. The specific trigger mechanism is not described in the available sources. No public exploit was identified in the provided data. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Nov 02, 2026
Dell Alienware Command Center (AWCC) releases prior to 6.14.54.0 contain an improper privilege management flaw (CWE-269) that lets an attacker who already holds a low-privileged local account escalate to higher privileges, with high impact to confidentiality, integrity and availability. Exploitation requires local access to a Windows host running the affected AWCC build, and the vendor has published a security advisory (DSA-2026-429) covering multiple vulnerabilities in the 6.x line. No public exploit code has been identified at time of analysis, and the flaw is not confirmed as actively exploited (no CISA KEV listing) despite a high CVSS base score of 7.8.
RemediationAI
Vendor-released patch: upgrade Dell Alienware Command Center to version 6.14.54.0 or later; Dell's DSA-2026-429 advisory (https://www.dell.com/support/kbdoc/en-us/000512248/dsa-2026-429-security-update-for-dell-alienware-command-center-6-x-for-multiple-vulnerabilities) documents the update for the 6.x line, and systems can also be updated through the Dell support/update channels used for the machine. Because the flaw is local-only and requires a pre-existing low-privileged account, the practical interim controls are to remove or update AWCC on hosts that do not require it, and until the upgrade is applied, restrict interactive logon to affected gaming endpoints to trusted users and audit local accounts for unnecessary standard-user access, accepting that this reduces usability on shared machines rather than removing the underlying escalation path. Re-scan endpoints for AWCC versions below 6.14.54.0 after rollout to confirm coverage.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The CWE-269 class (Improper Privilege Management) indicates that the software assigns, checks or enforces privilege levels incorrectly, allowing a process running with fewer rights to reach operations or resources meant for a higher privilege context. Here the affected component is Dell Alienware Command Center, a Windows gaming/control utility shipped with Alienware and Dell gaming systems that typically installs background services and drivers of its own and is often used from standard user sessions; a low-privileged local user interacting with such a component can obtain elevated rights on the host. The trigger mechanism - the specific AWCC feature, service or interface that mishandles privileges - is not described in the available sources, so it should not be assumed to be a race condition, insecure file permissions or a particular IPC channel without further vendor detail. Per the CPE data the affected product is identified as dell:alienware_command_center_(awcc) with no granular version breakdown beyond the vendor statement that all versions prior to 6.14.54.0 are affected. The CVSS vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H confirms a local attack path with low attack complexity, no user interaction, and full impact to confidentiality, integrity and availability on the same security scope.
Know when Alienware Command Center Awcc gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local privilege escalation by an existing low-privileged user (AV:L, PR:L) with no interaction; successful escalation grants full C/I/A control of the system.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
2DescriptionCVE.org
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege.
Executive ViewAI
Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 contain an improper privilege management flaw that allows a local low-privileged user to escalate to higher privileges, with high impact to confidentiality, integrity, and availability. While no public exploit code or active exploitation has been identified, the vulnerability affects Windows hosts with AWCC installed and could enable significant compromise if an attacker gains local access. Leadership should prioritize patching and reducing local attack surface on systems running AWCC.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.
Improper verification of cryptographic signatures in Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 al
Elevation of Privileges in Dell Alienware Command Center (AWCC) versions prior to 6.13.8.0 allows a local low-privileged
Incorrect default permissions in Dell Alienware Command Center (AWCC) before version 6.14.54.0 allow a low-privileged lo
Local privilege escalation in Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 allows a low-privileged l
Elevation of privilege in Dell Alienware Command Center (AWCC) releases prior to 6.14.54.0 lets a local, non-administrat
Exploit-DB