An issue in the WCH CH340/CH341 USB‑to‑Serial Windows Driver setup package allows a local attacker to gain elevated privileges on the system. The vulnerability arises during the installation of CH341SER.EXE version 4.0, permitting the attacker to execute commands with higher privileges than the current user account. This flaw can lead to full control over the affected machine if exploited by an authenticated local user.

The affected component is the WCH CH340/CH341 USB‑to‑Serial driver for Windows, specifically the CH341SER.EXE setup package version 4.0. Systems running this driver without an updated version or mitigation are at risk. No additional vendors or versions are listed.

The CVE does not provide a CVSS score or EPSS likelihood, and it is not included in the CISA KEV catalog. The attack vector is inferred to be local, requiring the attacker to have physical access to the machine and the ability to run the installer. Without a publicly available exploit, the immediate threat is limited to environments where the driver is in use and an attacker can install or re‑install it. Nevertheless, because the vulnerability permits privilege escalation, the potential impact is significant if an attacker obtains local access.