Security Advisory
CVE-2024-9497
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.