{"id":"CVE-2024-37142","aliases":["EUVD-2024-36464","GHSA-8q6r-7pj6-2j2p"],"status":"published","title":"Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element...","description":"Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00199,"percentile":0.0971,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-427"],"published":"2024-07-31T08:19:17Z","modified":"2026-06-17T07:37:49Z","products":[{"vendor":"dell","product":"dell peripheral manager"},{"vendor":"dell","product":"peripheral_manager"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000225474/dsa-2024-242","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-37142"},{"url":"https://github.com/advisories/GHSA-8q6r-7pj6-2j2p"}],"sources":{"cve":[{"id":"CVE-2024-37142","description":"Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege","status":"published","published":"2024-07-31T08:19:17.173Z","modified":"2024-07-31T16:42:38.695Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:34:00.585327Z"}],"euvd":[{"id":"EUVD-2024-36464","description":"Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege","status":"published","published":"2024-07-31T08:19:17Z","modified":"2024-07-31T16:42:38Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:48.911719Z"}],"ghsa":[{"id":"GHSA-8q6r-7pj6-2j2p","title":"Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element...","description":"Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege","status":"published","published":"2024-07-31T09:30:50Z","modified":"2024-07-31T09:30:56Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:57:45.682811Z"}],"nvd":[{"id":"CVE-2024-37142","description":"Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege","status":"published","published":"2024-07-31T09:15:04.7Z","modified":"2026-06-17T07:37:49.953Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:10:15.933769Z"}]}}