medium6.3
CVE-2023-32454
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability.
Impact
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could exploit the vulnerability to create arbitrary files, leading to denial of service
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Update Package Framework | through 4.9.4.36 |