Severity
High
Analysis Summary
CVE-2024-37127 CVSS:7.8
Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege.
CVE-2024-37142 CVSS:7.3
Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege.
CVE-2024-32857 CVSS:7.3
Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege.
Impact
- Gain Access
Indicators of Compromise
CVE
- CVE-2024-37127
- CVE-2024-37142
- CVE-2024-32857
Affected Vendors
Affected Products
- Dell Peripheral Manager
Remediation
Refer to Dell Security Advisory for patch, upgrade, or suggested workaround information.