CVE-2024-9499
CVSS 3.1 Score 8.6 of 10 (high)
Details
Published Jan 24, 2025
CWE ID 427
Summary
CVE-2024-9499 is a newly disclosed vulnerability affecting the USBXpress Win 98SE Dev Kit installer. This issue arises due to an unchecked search path within the installer, which allows an attacker to hijack a DLL and execute arbitrary code with elevated privileges. Successful exploitation of this vulnerability could lead to significant security risks, including privilege escalation and code execution. The impacted installer should be updated or replaced as soon as possible to mitigate these threats.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- USBXpress Win 98SE Dev Kit