CVE-2024-42191

EUVD-2024-54613 · Published May 30, 2025

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a COM hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content.

Technologies

Hcltech Traveler For Microsoft Outlook

Weaknesses

CWE-427

CVSS scores

v3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Execution Stealth

T1190Exploit Public-Facing Application T1574.001DLL T1574.004Dylib Hijacking T1574.007Path Interception by PATH Environment Variable T1574.008Path Interception by Search Order Hijacking T1574.009Path Interception by Unquoted Path

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120745

Potentially impacted assets

See if this affects your attack surface