This vulnerability allows a local attacker who already has write access to a particular configuration file in Security Center to escalate privileges by executing arbitrary code with elevated rights. The attack does not require further user interaction. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability. The weakness is related to improper handling of input leading to command injection (CWE-78). No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

Successful exploitation results in arbitrary code execution with elevated privileges, compromising system confidentiality, integrity, and availability. Since the attacker must have write access to a specific configuration file, the initial access vector is limited. There is no indication of remote exploitation or requirement for user interaction beyond the initial file access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the meantime, restrict write permissions to configuration files within Security Center to trusted users only to reduce risk.