CVE-2024-9493: Uncontrolled search path can lead to DLL hijacking in ToolStick installer
Published Jan 24, 2025
·Updated
DLL hijacking vulnerabilities, caused by an uncontrolled search path in the
ToolStick
installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
Affected Software
1 affected component
Silicon Labs ToolStick
Event History
Jan 24, 2025
CVE Published
via MITRE·02:28 PM
Data Sourced
via MITRE·02:28 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-9493?
CVE-2024-9493 is considered a high severity vulnerability due to its potential for privilege escalation and arbitrary code execution.
2
How do I fix CVE-2024-9493?
To fix CVE-2024-9493, ensure that you update the ToolStick installer to the latest version released by Silicon Labs.
3
What causes CVE-2024-9493?
CVE-2024-9493 is caused by an uncontrolled search path in the ToolStick installer that allows DLL hijacking.
4
What software is affected by CVE-2024-9493?
CVE-2024-9493 affects the Silicon Labs ToolStick software.
5
What are the potential consequences of CVE-2024-9493?
The potential consequences of CVE-2024-9493 include unauthorized privilege escalation and execution of arbitrary code on the system.