Skip to content
Sign in
8.6 High

CVE-2024-9497 DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to…

Description

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.

Affected products and versions

Product Affected versions Fixed in
USBXpress 4 SDK 4.0 earliest → 4.0.3 No fix stated
Track this CVE