Dell Update Package DUP Framework Improper Permission Management Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in the Dell Update Package (DUP) Framework, specifically in versions 23.12.00 prior to 24.12.00. This vulnerability involves improper handling of permissions, allowing a low-privileged attacker with local access to potentially escalate privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Users are advised to update to Dell Update Package (DUP) Framework version 25.02.00 or later. Instructions for downloading the updated version are available on the Dell Support website.