Vulnerability record/PUBLISHED/Published Jul 31, 2024 08:19:17 UTC

CVE-2024-37142

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege

Base score7.3/ 10

SeverityHighCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityHigh

Attack vectorLocalAV

Attack complexityLowAC

Privileges requiredLowPR

User interactionRequiredUI

ScopeUnchangedS

Confidentiality impactHighC

Integrity impactHighI

Availability impactHighA

CVSS vector stringCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authoritydell

Last updatedJul 31, 2024 16:42:38 UTC

PublishedJul 31, 2024 08:19:17 UTC

ReservedJun 3, 2024 12:10:32 UTC

Credits

Dell Technologies would like to thank Ouallaout Noureddine for reporting these issues