## Summary
Dell Optimizer versions prior to 6.3.1.0 contain an Improper Link Resolution Before File Access ("Link Following") vulnerability (CWE-59). A low-privileged local attacker could exploit it to achieve Elevation of Privileges.
## Technical Details
- Vulnerability class: Improper Link Resolution Before File Access ("Link Following") (CWE-59).
- Risk: Improper handling of filesystem links can allow an attacker to redirect file access to unintended targets, enabling privilege escalation.
- Attack vector: LOCAL with PR:L (low privileges) and UI:R (user interaction required).
## Affected
- Dell Optimizer versions 6.0.0.0 to 6.3.0.0 (remediated by 6.3.1.0 and later).
## Impact
- Elevation of Privileges for a low privileged attacker with local access.
- CVSS: 7.3 with vector CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.
## Mitigation
1. Upgrade Dell Optimizer to 6.3.1.0 or later.
2. For systems that cannot be upgraded immediately, restrict local access to low-privileged users and reduce opportunities for user-interaction-driven exploitation (per UI:R).
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-59