Dell Display Manager <=2.1.1.17 insecure junction/mount deletion on Windows
CVE-2023-32474 Published on February 6, 2024
Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount point. A local malicious user could potentially exploit this vulnerability during installation leading to arbitrary folder or file deletion
Vulnerability Analysis
CVE-2023-32474 is exploitable with local system access, requires user interaction and a small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity and availability.
Weakness Type
Products Associated with CVE-2023-32474
Want to know whenever a new CVE is published for Dell Display Manager? stack.watch will email you.
Affected Versions
Dell Display Manager:- Before and including 2.1.1.17 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.