CVE-2024-22451
MEDIUM
6.7
CVSS 3.1
Description
Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious executable, leading to arbitrary code execution.
Metadata
Severity & Metrics
6.7
MEDIUM CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
SSVC — CISA Coordinator
Affected products (1)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| Dell | Peripheral Manager | — | 0 < 1.7.3 or later |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| CWE-427 | cna | CWE-427: Uncontrolled Search Path Element |
CVSS scores (1)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 6.7 | MEDIUM | 3.1 | cna | CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H |