Dell Display Manager up to 2.3.2.19 Installation race condition

Summaryinfo

A vulnerability categorized as critical has been discovered in Dell Display Manager up to 2.3.2.19. The affected element is an unknown function of the component Installation Handler. Executing a manipulation can lead to race condition. This vulnerability is registered as CVE-2025-21101. The attack needs to be launched locally. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical was found in Dell Display Manager up to 2.3.2.19. This vulnerability affects an unknown functionality of the component Installation Handler. The manipulation with an unknown input leads to a race condition vulnerability. The CWE definition for the vulnerability is CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. As an impact it is known to affect integrity, and availability. CVE summarizes:

Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file deletion.

The weakness was published by Ouallaout Noureddine as dsa-2025-033. The advisory is shared for download at dell.com. This vulnerability was named CVE-2025-21101 since 11/22/2024. The exploitation appears to be difficult. The attack needs to be approached locally. There are neither technical details nor an exploit publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 214307 (Dell Display Manager Multiple Vulnerabilities (DSA-2025-033)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 2.3.2.20 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (214307). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Dell

Name

• Display Manager

Version

• 2.3.2.0
• 2.3.2.1
• 2.3.2.2
• 2.3.2.3
• 2.3.2.4
• 2.3.2.5
• 2.3.2.6
• 2.3.2.7
• 2.3.2.8
• 2.3.2.9
• 2.3.2.10
• 2.3.2.11
• 2.3.2.12
• 2.3.2.13
• 2.3.2.14
• 2.3.2.15
• 2.3.2.16
• 2.3.2.17
• 2.3.2.18
• 2.3.2.19

License

• commercial

Website

• Vendor: https://www.dell.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion