CVE-2024-7562Patch

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions (InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2) are affected by this issue.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://community.revenera.com/s/article/cve-2024-7562-privilege-escalation-vulnerability-in-created-msi-packages

Weakness type (CWE)

CWE-379

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets2 URLs

By indicator

Full discourse1 post

Steven M. Salter@StevenMSalter176d
Patch
Here is the information on the Security Vuln in versions earlier than 5.7. Looks like its an installer problem from 2024 https://www.dell.com/support/kbdoc/en-us/000451008/dsa-2026-190-security-update-for-dell-command-update-for-a-revenera-installshield-vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-7562 CVE-2024-7562
Post summary
The Dell KB provides a security update for CVE-2024-7562, addressing an installer vulnerability in earlier versions, indicating a patch is available.
00001139
492 followersView on X

Explore more

Back to dashboard