Dell DUP Framework vulnerabilities

2 vulnerabilities

Known vulnerabilities in Dell DUP Framework, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.3CVE-2023-39254delldup framework+1
EPSS score
0.17%
Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin.7.1CVE-2023-32454delldup framework+1
EPSS score
0.17%
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could exploit the vulnerability to create arbitrary files, leading to denial of service