Lucene search

DellCVE-2024-37142

HistoryJul 31, 2024 - 9:15 a.m.

CVE-2024-37142

2024-07-3109:15:04

CWE-427

dell

web.nvd.nist.gov

dell peripheral manager

versions prior

uncontrolled search path

vulnerability

malicious dll

symbolic link exploitation

arbitrary code execution

privilege escalation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

Percentile

9.4%

JSON

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege

Affected configurations

Nvd

Vulners

Vulnrichment

Node

dellperipheral_managerRange<1.7.6

VendorProductVersionCPE
dellperipheral_manager*cpe:2.3:a:dell:peripheral_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	peripheral_manager	*	cpe:2.3:a:dell:peripheral_manager::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell Peripheral Manager",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "1.7.6",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000225474/dsa-2024-242

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

Percentile

9.4%

JSON

Related for CVE-2024-37142