Dell Repository Manager Uncontrolled Search Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability has been identified in Dell Repository Manager (DRM) versions prior to 3.4.8) that involves an uncontrolled search path element. This vulnerability allows a low-privileged attacker with local access to exploit the issue, potentially leading to arbitrary code execution and escalation of privileges.

Impact

Exploitation of this vulnerability could result in unauthorized arbitrary code execution with elevated privileges on the affected system.

Remediation

Users can upgrade to Dell Repository Manager version 3.4.8 or later to address this vulnerability. The update is available through the Dell Support website.