CVE-2024-22451 is an uncontrolled search path element vulnerability in Dell Peripheral Manager affecting versions from 1.5.1 to 1.7.2. This vulnerability arises when the software uses insecure search paths for loading executables or libraries, allowing an attacker with limited privileges to preload malicious code. Exploitation could lead to arbitrary code execution with partial user privileges. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity, low privileges, and user interaction, but can impact confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary code on the affected system with limited privileges, potentially compromising confidentiality, integrity, and availability of the system. The attack requires local access and user interaction, which limits remote exploitation but still poses a risk to users running vulnerable versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid running untrusted executables and limit local user access where possible. Monitor Dell's official channels for updates and apply patches promptly once available.