Arbitrary file overwrite via crafted symbolic link

Arbitrary file overwrite in Dell Client Consumer and Commercial Platforms allows local users to replace files via a crafted symlink. While the Dell Firmware Update Utility runs with administrator rights, it follows a low-privileged user's symbolic link and redirects the administrator's file write to an attacker-chosen target. Exploitation requires a locally authenticated user and an administrator executing the utility during the attack window; the delivered binary payload is unaffected.