Description
An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Duet Display | Duet Display for Windows 10+ | 2.5.9.1 | — |