CVE-2024-52537

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published Dec 11, 2024
CWE ID 61

Summary

CVE-2024-52537 is a newly identified vulnerability affecting Dell's Client Platform Firmware Update Utility. This issue involves Improper Link Resolution, enabling a high privileged attacker with local access to potentially exploit it and gain elevated privileges within the system. By manipulating specially crafted links, an attacker could bypass security restrictions and execute unauthorized code, posing a significant threat to the targeted system. System administrators are urged to install the necessary patches as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share