CVE-2024-9495: Uncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer
DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210x VCP Windows
installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9495?
CVE-2024-9495 has a high severity level as it can lead to privilege escalation and arbitrary code execution.
How do I fix CVE-2024-9495?
To fix CVE-2024-9495, ensure that you download and install the latest version of the Silicon Labs CP210x VCP Windows Installer from authorized sources.
Can CVE-2024-9495 be exploited remotely?
CVE-2024-9495 is primarily exploited through local execution of the affected installer, so it requires a local attack vector.
What systems are affected by CVE-2024-9495?
CVE-2024-9495 affects the CP210x VCP Windows Installer provided by Silicon Labs.
Is there any available mitigation for CVE-2024-9495?
To mitigate CVE-2024-9495, users should avoid running installers from untrusted sources and verify the integrity of the installation files.