Dell Peripheral Manager Vulnerability Allows Arbitrary Code Execution

CVE-2024-32857

Summary

The vulnerability in Dell Peripheral Manager specifically affects versions prior to 1.7.6 and stems from an uncontrolled search path element. This security issue allows an attacker to exploit the system by preloading malicious dynamic link libraries (DLLs) or utilizing symbolic link exploitation. Such attacks could potentially lead to arbitrary code execution and unauthorized privilege escalation, compromising the integrity and security of affected systems.

References