CVE-2024-22447

MEDIUM

Dell Peripheral Manager < 1.7.3 or later - Uncontrolled Search Path Element

Title source: rule

Description

Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious dll., leading to arbitrary code execution.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory

https://www.dell.com/support/kbdoc/en-us/000221413/dsa-2024-055-security-update-for-dell-peripheral-manager-uncontrolled-search-path-element-vulnerabilities?lang=en

Scores

CVSS v3 6.7

EPSS 0.0010

EPSS Percentile 0.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-427

Status published

Products (2)

Dell/Peripheral Manager < 1.7.3 or later

dell/peripheral_manager < 1.7.3

Published Jun 16, 2026

Tracked Since Jun 16, 2026