CVE-2024-9495

Summary

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210x VCP Windows

installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.

Affected Software

VendorProductVersion RangeStatus
silabs.comCP210x VCP Windows0 <= 6.7affected

Weaknesses

  • CWE-427: CWE-427 Uncontrolled Search Path Element

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References