PT-2025-4191 · Dell · Dell Display Manager

Published 2025-01-15 · Updated 2025-01-15 · CVE-2025-21101

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Display Manager versions prior to 2.3.2.20

Description A race condition vulnerability exists in the software. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file deletion.

Recommendations For versions prior to 2.3.2.20, update to version 2.3.2.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the installation process to minimize the risk of exploitation.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2025-21101

Affected Products

Dell Display Manager

References · 7

• https://dell.com/support/kbdoc/en-us/000267927/dsa-2025-033 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-21101 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21101 · Security Note
• https://twitter.com/VulmonFeeds/status/1879477259767083134 · Twitter Post
• https://t.me/cvedetector/15406 · Telegram Post
• https://t.me/cvenotify/107423 · Telegram Post
• https://twitter.com/CVEnew/status/1879490166630572116 · Twitter Post