silabs.com Configuration Wizard 2 vulnerabilities

Latest silabs.com Configuration Wizard 2 CVEs

Newest publication first

1. CVE-2024-9491 Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installer

   Published 2025-01-24

   High·CVSS 8.6 EPSS 0.19%

   DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.