CVE-2024-5292
D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of D-Link Network Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DNACore service. The service loads a file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21426.
| CWE | CWE-427 |
| Vendor | d-link |
| Product | network assistant |
| Published | May 23, 2024 |
| Last Updated | Aug 1, 2024 |
Stay Ahead of the Next One
Get instant alerts for d-link network assistant
Be the first to know when new high vulnerabilities affecting d-link network assistant are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Versions
D-Link / Network Assistant
4.0.0.21