CVE-2024-9490 Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Silicon Labs 8-bit IDE installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9490

CVE-2024-9490 concerns DLL hijacking due to an uncontrolled search path in Silicon Labs (8‑bit) IDE installer. The vulnerability allows privilege escalation and arbitrary code execution when running the impacted installer. Affected software is the Silicon Labs IDE installer (8‑bit). Root cause is...

Silicon CP210x VCP Windows installer 代码问题漏洞

Silicon CP210x VCP Windows installer is a CP210x VCP Windows installer from Silicon Corporation. A security vulnerability exists in Silicon CP210x VCP Windows installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute...

PT-2025-3715 · Silicon · Silicon Labs (8-Bit) Ide Installer

Name of the Vulnerable Software and Affected Versions: Silicon Labs 8-bit IDE installer affected versions not specified Description: The issue is caused by an uncontrolled search path in the Silicon Labs 8-bit IDE installer, leading to DLL hijacking vulnerabilities. These vulnerabilities can resu...

Custom Backdoor Exploiting Magic Packet Vulnerability in Juniper Routers

Enterprise-grade Juniper Networks routers have become the target of a custom backdoor as part of a campaign dubbed J-magic. According to the Black Lotus Labs team at Lumen Technologies, the activity is so named for the fact that the backdoor continuously monitors for a "magic packet" sent by the...

Silicon Labs EmberZNet 访问控制错误漏洞

Silicon Labs EmberZNet is a complete Zigbee protocol package from Silicon Labs, Inc. that contains all the elements required for robust and reliable mesh networking applications on the Silicon Labs Ember platform. An access control error vulnerability exists in Silicon Labs EmberZNet, which stems...

Terraform Labs Founder Do Kwon Extradited to US, Faces 130-Year Sentence

SUMMARY: Do Hyeong Kwon Do Kwon, the 33-year-old co-founder and former CEO of Terraform Labs, has been extradited…...

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers

A proof-of-concept PoC exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol LDAP that could trigger a denial-of-service DoS condition. The out-of-bounds reads vulnerability is tracked as CVE-2024-49113 CVSS score: 7.5. It was addressed ...

Exploit for Integer Overflow or Wraparound in Microsoft

PoC exploit for CVE-2024-49112 is uncertain. It is an offensive...

Exploit for Out-of-bounds Read in Microsoft

PoC exploit for CVE-2024-49113, a Windows Server vulnerability...

Exploit for Integer Overflow or Wraparound in Microsoft

PoC exploit for CVE-2024-49113, a Windows Server vulnerability...

FortiGuard Labs Links New EC2 Grouper Hackers to AWS Credential Exploits

Researchers at FortiGuard Labs have identified a prolific attacker group known as "EC2 Grouper" who frequently exploits compromised credentials using AWS tools...

CVE-2024-7139 Denial of Service in Silicon Labs RS9116 Bluetooth SDK

Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow. This buffer overflow triggers an assert, which results in a temporary denial of service. If a watchdog timer is not enabled, a hard reset is required to recover the device...

CVE-2024-7139 Denial of Service in Silicon Labs RS9116 Bluetooth SDK

Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow. This buffer overflow triggers an assert, which results in a temporary denial of service. If a watchdog timer is not enabled, a hard reset is required to recover the device...

CVE-2024-7139

The CVE-2024-7139 entry concerns Silicon Labs RS9116 Bluetooth SDK. The issue is caused by an unchecked buffer length in L2CAP processing, allowing a buffer overflow that triggers an assertion and leads to a temporary denial of service. The impact is a DoS, with a potential required hard reset to...

CVE-2024-7138

CVE-2024-7138 affects Silicon Labs RS9116 Bluetooth SDK. A software assertion can trigger when a peer sends specially crafted malformed L2CAP packets, causing a temporary denial of service. If a watchdog timer is not enabled, recovery may require a hard reset of the device. Documents consistently...

CVE-2024-7138 Denial of Service in Silicon Labs RS9116 Bluetooth SDK

An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device...

CVE-2024-7138 Denial of Service in Silicon Labs RS9116 Bluetooth SDK

An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device...

CVE-2024-7137 Denial of Service in Silicon Labs RS9116 Bluetooth SDK

The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet size. Receiving a packet that exceeds the restricted buffer length may cause a crash. A hard reset is required to recover the crashed device...

CVE-2024-7137 Denial of Service in Silicon Labs RS9116 Bluetooth SDK

The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet size. Receiving a packet that exceeds the restricted buffer length may cause a crash. A hard reset is required to recover the crashed device...