CVE-2024-9495 Uncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210x VCP Windows installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9495

CVE-2024-9495 = DLL hijacking in Silicon Labs CP210x VCP Windows installer due to an uncontrolled search path. Affected component: CP210x VCP Windows installer. Impact: privilege escalation and arbitrary code execution when running the impacted installer (local exploit path). Several feeds corrob...

CVE-2024-9495 Uncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210x VCP Windows installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9494 Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210 VCP Win 2k installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9494

CVE-2024-9494 concerns a DLL hijacking vulnerability in the CP210 VCP Win 2k installer caused by an uncontrolled search path. The affected component is the installer for Silicon CP210 VCP Win 2k, with impact described as privilege escalation and arbitrary code execution when running the impacted ...

CVE-2024-9494 Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210 VCP Win 2k installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9493 Uncontrolled search path can lead to DLL hijacking in ToolStick installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the ToolStick installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9493

The CVE-2024-9493 issue affects the ToolStick installer, caused by an uncontrolled search path that enables DLL hijacking. This can lead to local privilege escalation and arbitrary code execution when running the impacted installer. Root cause: DLL search path handling in the ToolStick installer....

CVE-2024-9493 Uncontrolled search path can lead to DLL hijacking in ToolStick installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the ToolStick installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9492 Uncontrolled search path can lead to DLL hijacking in Flash Programming Utility installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Flash Programming Utility installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9492 Uncontrolled search path can lead to DLL hijacking in Flash Programming Utility installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Flash Programming Utility installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9492

CVE-2024-9492 concerns the Silicon Flash Programming Utility installer, where an uncontrolled search path enables DLL hijacking. The issue is triggered when the impacted installer is run, with a local attacker needing low complexity and user interaction, potentially leading to privilege escalatio...

CVE-2024-9491 Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9491

CVE-2024-9491 affects the Configuration Wizard 2 installer (Silicon Labs/Silicon Configuration Wizard 2) and is caused by an uncontrolled DLL search path, enabling DLL hijacking. Impact described in sources as local escalation that could lead to privilege escalation and arbitrary code execution w...

CVE-2024-9490

CVE-2024-9490 concerns DLL hijacking due to an uncontrolled search path in Silicon Labs (8‑bit) IDE installer. The vulnerability allows privilege escalation and arbitrary code execution when running the impacted installer. Affected software is the Silicon Labs IDE installer (8‑bit). Root cause is...

CVE-2024-9490 Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Silicon Labs 8-bit IDE installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

PT-2025-3720 · Silicon · Cp210X Vcp Windows Installer

Name of the Vulnerable Software and Affected Versions: CP210x VCP Windows installer affected versions not specified Description: The issue is caused by an uncontrolled search path in the CP210x VCP Windows installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalatio...

PT-2025-3721 · Unknown · Usbxpress Dev Kit

Name of the Vulnerable Software and Affected Versions: USBXpress Dev Kit affected versions not specified Description: The issue is caused by an uncontrolled search path in the USBXpress Dev Kit installer, leading to DLL hijacking vulnerabilities. These vulnerabilities can result in privilege...

PT-2025-3715 · Silicon · Silicon Labs (8-Bit) Ide Installer

Name of the Vulnerable Software and Affected Versions: Silicon Labs 8-bit IDE installer affected versions not specified Description: The issue is caused by an uncontrolled search path in the Silicon Labs 8-bit IDE installer, leading to DLL hijacking vulnerabilities. These vulnerabilities can resu...

PT-2025-3722 · Unknown · Usbxpress 4 Sdk

Name of the Vulnerable Software and Affected Versions: USBXpress 4 SDK affected versions not specified Description: The issue is related to DLL hijacking vulnerabilities caused by an uncontrolled search path in the USBXpress 4 SDK installer. This can lead to privilege escalation and arbitrary cod...