CVE-2024-57963 Insecure Loading of Dynamic Link Libraries in USB-CONVERTERCABLE DRIVER

High 7.3 Published Updated

Local attackers can exploit insecure DLL loading in the USB-CONVERTERCABLE driver to execute arbitrary code or disclose information.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
A user has to click or open something
Fix
None listed

What is CVE-2024-57963?

CVE-2024-57963 is a high-severity vulnerability in Hitachi USB-CONVERTERCABLE DRIVER, published on 18 Feb 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Insecure Loading of Dynamic Link Libraries have been discovered in USB-CONVERTERCABLE DRIVER, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects USB-CONVERTERCABLE DRIVER:.

Weakness: CWE-427

Which versions are affected by CVE-2024-57963?

How do I fix CVE-2024-57963?

No fix has been published for CVE-2024-57963 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-57963 being exploited?

There is no known exploitation of CVE-2024-57963 in the wild and no public exploit code.

Sources

Also known as GHSA-v9cw-cp2g-48mj.

Is CVE-2024-57963 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free