Dell Peripheral Manager Uncontrolled Search Path Vulnerability
CVE-2024-37142

7.8HIGH

Key Information:

Vendor
Dell
Status
Dell Peripheral Manager
Vendor
CVE Published:
31 July 2024

Summary

Dell Peripheral Manager, versions prior to 1.7.6, is affected by an uncontrolled search path element vulnerability that could be exploited by attackers. This vulnerability may allow the execution of harmful code and elevate user privileges through techniques such as preloading malicious DLL files or exploiting symbolic links. Users are advised to update to the latest version to mitigate potential security risks.

Affected Version(s)

Dell Peripheral Manager < 1.7.6

References

https://www.dell.com/support/kbdoc/en-us/000225474/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell Technologies would like to thank Ouallaout Noureddine for reporting these issues
.