Dell Command Monitor Execution with Unnecessary Privileges Vulnerability Allowing Privilege Escalation

A vulnerability allowing execution with unnecessary privileges has been identified in Dell Command Monitor (DCM) versions prior to 10.12.3.28. This vulnerability could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized elevation of privileges.

Impact

Exploitation of this vulnerability could allow a low-privileged user to gain elevated privileges on the affected system.

Remediation

Users can upgrade to Dell Command Monitor version 10.12.3.28 or later. The updated version is available through the Dell Command Monitor Driver Details page on the Dell Support website.