What is CVE-2024-37127?

CVE-2024-37127 is a high-severity vulnerability in Dell Peripheral Manager, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2024-07-31.

How severe is CVE-2024-37127?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Dell Peripheral Manager

CVE-2024-37127

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading t…

EPSS: 0.002 (10.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell Peripheral Manager — versions N/A
Dell Peripheral_manager

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

security_alert@emc.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2024-37127?: CVE-2024-37127 is a high-severity vulnerability in Dell Peripheral Manager, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2024-07-31.
How severe is CVE-2024-37127?: High severity. CVSS v3 base score is 7.8 out of 10.