DUP Framework vulnerabilities

2 known vulnerabilities in DUP Framework from Dell. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  DUP Framework: Uncontrolled Search Path Element

  CVE-2023-39254Mar 1, 2024Dell

  Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin.

• 7.1 High severity

  DUP Framework: Improper Link Resolution Before File Access

  CVE-2023-32454Feb 6, 2024Dell

  DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could exploit the vulnerability to create arbitrary files, leading to denial of service