CVE-2024-5292 | BDVDB-2026-237341 Detail

Description#

D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of D-Link Network Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DNACore service. The service loads a file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21426.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-05-23Record published in the CVE List.
2. Version 22024-08-01Most recent update recorded in the CVE List.