CVEvulnerability

CVE-2024-52537

6.7 MEDIUM Published 2024-12-11 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-12-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-59, CWE-61

Description

Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Affected configurations

• dell dock hd22q firmware update utility (< 1.00.23) • dell dock hd22q firmware update utility (< 1.00.28) • dell dock wd19 firmware update utility (< 01.00.44) • dell dock wd19 firmware update utility (< 01.00.28) • dell dock wd22tb4 firmware update utility (< 01.00.28) • dell dock wd22tb4 firmware update utility (< 01.00.44)

Related

Weakness · CWE (2)

  • CWE-59 Improper Link Resolution Before File Access weakness
  • CWE-61 UNIX Symbolic Link (Symlink) Following weakness

References