PT-2025-7322 · Carrier · Carrier Hvac

Ahil Shah

+1

·

Published

2025-02-20

·

Updated

2026-02-05

·

CVE-2024-10930

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Carrier - Block Load versions 4.00 through 4.16
Description An uncontrolled search path element issue exists, potentially allowing an attacker to perform DLL hijacking and execute arbitrary code with elevated privileges. This issue is reportedly being actively exploited. DLL hijacking occurs when a program loads a malicious DLL instead of a legitimate one, leading to code execution.
Recommendations Versions 4.00 through 4.16: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2024-10930

Affected Products

Carrier Hvac