CVE-2024-9494

Summary

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the 

CP210 VCP Win 2k

installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.

Affected Software

VendorProductVersion RangeStatus
silabs.comCP210 VCP Win 2k0 <= 6.3affected

Weaknesses

  • CWE-427: CWE-427 Uncontrolled Search Path Element

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References