8.6
High
CVE-2024-9491 DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to…
Description
DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Configuration Wizard 2 4.50 | earliest → 4.50 | No fix stated |