Dell Display Manager Vulnerability Allows Arbitrary File/Folder Deletion

CVE-2023-32474

What is CVE-2023-32474?

The Dell Display Manager application is impacted by a vulnerability due to an insecure operation involving Windows junctions and mount points. A local malicious actor may leverage this flaw to manipulate the installation process, ultimately resulting in arbitrary deletion of files or directories. This poses a significant risk for users who might unknowingly open their systems to exploitation during the installation or update phases of the application.

References