Description
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could exploit the vulnerability to create arbitrary files, leading to denial of service
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | DUP Framework | ≤ 4.9.4.36 | — |
References
- https://www.dell.com/support/kbdoc/en-us/000216236/dsa-2023-192 vendor-advisory