CVE-2025-46430CWE-250

CVE-2025-46430

High · published November 10, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

⚡ A low-privileged attacker's dream! The Dell Display and Peripheral Manager is vulnerable to an Execution with Unnecessary Privileges flaw in its installer, posing a serious risk for versions prior to 2.1.2.12. 🔥 Think of it like a janitor discovering the key to the CEO's office while simply cleaning the floors — with this vulnerability, an attacker could elevate their privileges without needing the proper clearance. It's surprisingly sneaky! If exploited, this flaw allows a low-privileged user with local access to elevate their privileges and potentially take full control over the system. This could lead to unauthorized data access, system modifications, or even remote control of the device, making it an alarming scenario for impacted users.

Put simply

Think of it like a janitor discovering the key to the CEO's office while simply cleaning the floors — with this vulnerability, an attacker could elevate their privileges without needing the proper clearance. It's surprisingly sneaky! This vulnerability stems from the Installer in the Dell Display and Peripheral Manager, which improperly grants elevated privileges to low-level processes, enabling attackers to execute arbitrary code with higher permissions than intended.

What to do

If exploited, this flaw allows a low-privileged user with local access to elevate their privileges and potentially take full control over the system. This could lead to unauthorized data access, system modifications, or even remote control of the device, making it an alarming scenario for impacted users. To mitigate this risk, update your Dell Display and Peripheral Manager to version 2.1.2.12 or later immediately. Additionally, audit user permissions and restrict access to sensitive areas of your system to minimize potential exploitation. You've got this! Follow these steps and you'll secure your system like a pro. 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2025-11-10T21:15Z
Affected products (1)
ProductVersionsFixed in
dell/display_and_peripheral_manager< 2.1.2.122.1.2.12
References (1)
EPSS history
Timeline
  • 10 NOV 15:59Z
    Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulnerability in the Installer
    cvelistv5