CVE-2023-6235CWE-427

Arbitrary code execution in Duet Display

High · published November 21, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of arbitrary code.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00260 · 16.8th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-11-21T12:24Z
EPSS history
Timeline
  • 21 NOV 12:24Z
    Arbitrary code execution in Duet Display
    cvelistv5