CVE-2024-9491

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.

Score

CVSS 3.1 8.6 High

Status

Deferred - product-security@silabs.com

Published

2025-01-24

Last modified

2025-02-12

Weaknesses

CWE-427

Affected products

• Configuration Wizard 2 (Silabs.com)

References

• https://community.silabs.com/068Vm00000JUQwd