CVE-2025-21101
CVE-2025-21101 is a medium-severity vulnerability in Dell Display Manager with a CVSS 3.x base score of 6.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-362.
Key facts
- Severity: Medium (CVSS 3.x base score 6.6)
- EPSS exploit prediction: 0% (1st percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2025-2223
- Weakness: CWE-362
- Affected product: Dell Display Manager
- Published:
- Last modified:
Description
Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file deletion.
Frequently asked questions
- What is CVE-2025-21101?
- Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file deletion.
- How severe is CVE-2025-21101?
- CVE-2025-21101 has a CVSS 3.x base score of 6.6, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and user interaction. Impact on confidentiality is none, integrity high, and availability high.
- Is CVE-2025-21101 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (1st percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2025-21101?
- CVE-2025-21101 affects Dell Display Manager. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2025-21101?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2025-21101 have an EU (EUVD) identifier?
- Yes. CVE-2025-21101 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-2223.
- When was CVE-2025-21101 published?
- CVE-2025-21101 was published on 2025-01-15 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:a:dell:display_manager:*:*:*:*:*:*:*:*
More vulnerabilities in Dell Display Manager
- CVE-2023-32451 — High (CVSS 7.3): Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute…
- CVE-2023-28047 — High (CVSS 7.3): Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during…
- CVE-2025-22394 — Medium (CVSS 6.7): Dell Display Manager, versions prior to 2.3.2.18, contain a Time-of-check Time-of-use (TOCTOU) Race Condition…
- CVE-2023-32474 — Medium (CVSS 6.6): Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount…
- CVE-2023-28046 — Medium (CVSS 6.6): Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during…
All CVEs affecting Dell Display Manager →
Other CWE-362 (Race Condition) vulnerabilities
- CVE-2022-27626 — Critical (CVSS 10.0): A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition')…
- CVE-2015-8556 — Critical (CVSS 10.0): Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.
- CVE-2014-0703 — Critical (CVSS 10.0): Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition…
- CVE-2010-1228 — Critical (CVSS 10.0): Multiple race conditions in the sandbox infrastructure in Google Chrome before 4.1.249.1036 have unspecified impact and…
- CVE-2008-6598 — Critical (CVSS 10.0): Multiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related to "bri restart logic."
- CVE-2026-46137 — Critical (CVSS 9.8): In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential…