Detections
Analytics
CVE-2023-6235
high
Description
An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of arbitrary code.
References
https://www.incibe.es/en/incibe-cert/notices/aviso/arbitrary-code-execution-duet-display