Description
DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| silabs.com | Configuration Wizard 2 | ≤ 4.50 | — |
References
- https://community.silabs.com/068Vm00000JUQwd vendor-advisory permissions-required