CVEvulnerability
CVE-2024-22106
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-07-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-269
Description
Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service (DoS).
Affected configurations
• jungo windriver (< 12.5.1)
• mitsubishielectric cpu module logging configuration tool
• mitsubishielectric cw configurator
• mitsubishielectric data transfer
• mitsubishielectric data transfer classic
• mitsubishielectric ezsocket
• mitsubishielectric fr configurator sw3
• mitsubishielectric fr configurator2
• mitsubishielectric genesis64
• mitsubishielectric gt got1000
• mitsubishielectric gt got2000
• mitsubishielectric gt softgot1000
• mitsubishielectric gt softgot2000
• mitsubishielectric gx developer
• mitsubishielectric gx logviewer
• mitsubishielectric gx works2
• mitsubishielectric gx works3
• mitsubishielectric iq works
• mitsubishielectric mi configurator
• mitsubishielectric mr configurator
• mitsubishielectric mr configurator2
• mitsubishielectric mx component
• mitsubishielectric mx opc server da\/ua
• mitsubishielectric numerical control device communication
• mitsubishielectric px developer\/monitor tool
• mitsubishielectric rt toolbox3
• mitsubishielectric rt visualbox
• mitsubishielectric mrzjw3-mc2-utl firmware
• mitsubishielectric sw0dnc-mneth-b firmware
• mitsubishielectric sw1dnc-ccbd2-b firmware
• mitsubishielectric sw1dnc-ccief-j firmware
• mitsubishielectric sw1dnc-ccief-b firmware
• mitsubishielectric sw1dnc-mnetg-b firmware
• mitsubishielectric sw1dnc-qsccf-b firmware
• mitsubishielectric sw1dnd-emsdk-b firmware
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://jungo.com/windriver/versions/ Release Notes
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04 Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf Third Party Advisory
- https://jungo.com/windriver/versions/ Release Notes
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04 Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf Third Party Advisory