CVE-2024-9496

Published: Jan 24, 2025Modified: Jun 17, 2026Deferred

8.6

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 6.0

Source: product-security@silabs.com (Secondary)

Description

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.

Related CWEs

CWE-427

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (1)

https://community.silabs.com/068Vm00000JUQwd

Source: product-security@silabs.com

Timeline

No history available yet.