EUVD-2026-57510
GHSA-wcfj-c995-x8wh
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local exploitation by a low-privileged authenticated user with no interaction required; full CIA impact reflects arbitrary code execution at elevated privilege after the authentication bypass.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.
AnalysisAI
Elevation of privilege and arbitrary code execution in Dell Display and Peripheral Manager (DDPM) for Windows, all versions prior to 2.3.0.17, is achievable by a low-privileged local attacker exploiting an authentication bypass by spoofing flaw. The CWE-284 root cause - improper access control - allows the attacker to circumvent DDPM's privilege verification, resulting in full confidentiality, integrity, and availability compromise on the affected host. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold an authenticated, low-privileged local Windows account on the target system (confirmed by CVSS PR:L) and to have interactive or programmatic local access to the host (confirmed by CVSS AV:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 7.8 with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H correctly characterizes this as a high-severity local privilege escalation: low complexity, no user interaction, and a full-impact outcome once the attacker has a foothold. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to upgrade Dell Display and Peripheral Manager (DDPM) for Windows to version 2.3.0.17 or later, as confirmed by Dell advisory DSA-2026-320 at https://www.dell.com/support/kbdoc/en-us/000490038/dsa-2026-320-security-updates-for-dell-display-and-peripheral-manager-ddpm-windows-for-multiple-vulnerabilities. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows systems running Dell DDPM to identify those on versions prior to 2.3.0.17 using configuration management or asset discovery tools. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Authentication bypass via spoofing in Dell Display and Peripheral Manager (DDPM) for Windows, versions prior to 2.3.0.17
Elevation of privilege and arbitrary code execution in Dell Display and Peripheral Manager (DDPM) for Windows allows a l
Local privilege escalation in Dell Display and Peripheral Manager (DDPM) for Windows enables a low-privileged local atta
Same weakness CWE-284 – Improper Access Control
View allShare
External POC / Exploit Code
Leaving vuln.today