Vulnerability CVE-2023-6235


Published: 2023-11-21

Description:
An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of arbitrary code.

 References:
https://www.incibe.es/en/incibe-cert/notices/aviso/arbitrary-code-execution-duet-display

Copyright 2023, cxsecurity.com

 

Back to Top