CVE-2017-2802: An exploitable dll hijacking vulnerability exists in the poaService.exe service component of the Dell Preci...

Security readout for executives and security teams

CVE-2017-2802 is a local privilege escalation issue in Dell Precision Optimizer. A user already on a vulnerable workstation could abuse how a Dell service loads DLL files to run code with higher privileges. This is not described as a remote internet attack. Likely exposure is limited to Dell Precision systems running Dell Precision Optimizer 3.5.5.0, with the source bundle specifically naming Precision Tower 5810 systems with NVIDIA graphics. Systems without this software version are not established as affected by the provided sources. Treat this as a workstation hardening and privilege escalation risk, not a broad remote compromise event. Prioritize environments with Dell Precision engineering workstations or shared endpoints where local user compromise could lead to administrator-level control. Mitigation focus: Inventory Dell Precision Optimizer installations and identify version 3.5.5.0.; Check Dell or Talos guidance for supported updates or removal direction.; Remove or disable vulnerable Precision Optimizer deployments if not operationally required..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.