CVE-2024-5292

CVE-2024-5292 is a Local Privilege Escalation vulnerability affecting D-Link Network Assistant, specifically within the DNACore service. Attackers can exploit an uncontrolled search path element to load a malicious file from an unsecured location, enabling privilege escalation from a low-privileged user to SYSTEM. With a CVSS score of 7.8 (High), this vulnerability requires prior low-privileged code execution on the target system. There is currently no public exploit code available, nor any evidence of active exploitation or significant community discussion.