Dell Update Package Framework Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in the Dell Update Package Framework, affecting versions prior to 22.01.02. This vulnerability allows a low-privileged local attacker to execute arbitrary remote scripts on the server, potentially leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability could result in unauthorized execution of scripts on the server, with a possibility of causing a denial-of-service condition.

Remediation

Users are advised to update to version 22.01.02 or later. To check the DUP Framework file version, right-click on the DUP file, select Properties, and click on the Details tab to find the File version number.