CVE-2024-37142CWE-427
Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability
High · published July 31, 2024
What it is
Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege
The record
Technical detail
- CVSS v3.1
- 7.3 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00199 · 9.1th percentile
- Weakness
- CWE-427 · Uncontrolled Search Path Element
- Published
- 2024-07-31T08:19Z
EPSS history
Timeline