CVE-2024-32857

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Jul 31, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-328588.2Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attack CVE-2024-328598.2Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attack CVE-2024-32867.5A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart CVE-2024-328608.2Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attack CVE-2024-328617.8Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permissions.CVE-2024-328628.1Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.CVE-2024-328638.8Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF)CVE-2024-328648.1Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS)CVE-2024-328657.3Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices.CVE-2024-328668.6Conform, a type-safe form validation library, allows the parsing of nested objects in the form of `object.property`. Due to an improper impl CVE-2024-328675.3Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0 CVE-2024-328688.1ZITADEL provides users the possibility to use Time-based One-Time-Password (TOTP) and One-Time-Password (OTP) through SMS and Email. While Z