CVE-2023-6235 Information

Description

An uncontrolled search path element vulnerability has been found in the Duet Display product affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory which could lead to the execution and persistence of arbitrary code.

Reference

https://www.incibe.es/en/incibe-cert/notices/aviso/arbitrary-code-execution-duet-display