CVE Catalog

CVE-2024-22447

MediumCVSS 6.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.10%

1th percentile — higher than 1% of all known CVEs

Summary

Dell Peripheral Manager versions prior to 1.7.3 contain an uncontrolled search path element vulnerability. An attacker could exploit this vulnerability to preload a malicious DLL, leading to arbitrary code execution.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system and potential takeover of the device.

Recommendation

It is recommended to update Dell Peripheral Manager to version 1.7.3 or later to mitigate this vulnerability.

Original NVD description (English source)

Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious dll., leading to arbitrary code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS