CVE-2024-9493

CVE-2024-9493 is a DLL hijacking vulnerability stemming from an uncontrolled search path (CWE-427) in the ToolStick installer from Silicon Labs. This flaw affects users running the impacted installer, enabling malicious DLL loading during execution. The vulnerability carries a CVSS v3.1 base score of 8.6 (AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), indicating high severity due to its potential for significant impact with local access and user interaction.

A local attacker with no required privileges can exploit this by placing a malicious DLL in a directory included in the installer's search path. When a user runs the ToolStick installer, it loads the attacker's DLL instead of the legitimate one, resulting in privilege escalation and arbitrary code execution with the installer's privileges.

Silicon Labs has published an advisory on their community site (https://community.silabs.com/068Vm00000JUQwd) addressing the issue, with details on mitigations for affected ToolStick installer versions.