{"id":"CVE-2024-22451","aliases":["EUVD-2024-55621","GHSA-q5pr-8h42-j678"],"status":"published","title":"Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path...","description":"Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious executable, leading to arbitrary code execution.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00099,"percentile":0.00802,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-427"],"published":"2026-06-16T15:16:00Z","modified":"2026-10-02T00:10:00Z","products":[{"vendor":"dell","product":"peripheral manager"},{"vendor":"dell","product":"peripheral_manager"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000221413/dsa-2024-055-security-update-for-dell-peripheral-manager-uncontrolled-search-path-element-vulnerabilities?lang=en","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22451"},{"url":"https://github.com/advisories/GHSA-q5pr-8h42-j678"}],"sources":{"cve":[{"id":"CVE-2024-22451","description":"Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious executable, leading to arbitrary code execution.","status":"published","published":"2026-06-16T15:16:00.056Z","modified":"2026-06-17T03:55:58.9Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:34:00.254134Z"}],"euvd":[{"id":"EUVD-2024-55621","description":"Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious executable, leading to arbitrary code execution.","status":"published","published":"2026-06-16T15:16:00Z","modified":"2026-06-17T03:55:58Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T18:20:39.851172Z"}],"ghsa":[{"id":"GHSA-q5pr-8h42-j678","title":"Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path...","description":"Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious executable, leading to arbitrary code execution.","status":"published","published":"2026-06-16T18:32:38Z","modified":"2026-06-16T18:32:44Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T15:08:48.835344Z"}],"nvd":[{"id":"CVE-2024-22451","description":"Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious executable, leading to arbitrary code execution.","status":"published","published":"2026-06-16T17:16:27.697Z","modified":"2026-10-02T00:10:00.18Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:10:47.77313Z"}]}}