High · 8.6 CVE-2024-9494 EUVD-2024-50457GHSA-x5mc-f54f-4pwj

Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer

Published Jan 24, 2025 · Updated Jan 27, 2025 · Assigned by Silabs

Description

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the

CP210 VCP Win 2k

installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.

Vendor	Product	Affected	Fixed
silabs.com	CP210 VCP Win 2k	≤ 6.3	—