CVE-2024-25086
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code.
La gestión inadecuada de privilegios en Jungo WinDriver anterior a 12.2.0 permite a atacantes locales escalar privilegios y ejecutar código arbitrario.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-02-04 CVE Reserved
- 2024-07-02 CVE Published
- 2024-07-06 EPSS Updated
- 2024-08-01 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-94: Improper Control of Generation of Code ('Code Injection')
- CWE-269: Improper Privilege Management
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://jungo.com/windriver/versions | Release Notes | |
| https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04 | Third Party Advisory | |
| https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mrzjw3-mc2-utl Firmware Search vendor "Mitsubishielectric" for product "Mrzjw3-mc2-utl Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Mrzjw3-mc2-utl Search vendor "Mitsubishielectric" for product "Mrzjw3-mc2-utl" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Sw0dnc-mneth-b Firmware Search vendor "Mitsubishielectric" for product "Sw0dnc-mneth-b Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Sw0dnc-mneth-b Search vendor "Mitsubishielectric" for product "Sw0dnc-mneth-b" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnc-ccbd2-b Firmware Search vendor "Mitsubishielectric" for product "Sw1dnc-ccbd2-b Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnc-ccbd2-b Search vendor "Mitsubishielectric" for product "Sw1dnc-ccbd2-b" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnc-ccief-j Firmware Search vendor "Mitsubishielectric" for product "Sw1dnc-ccief-j Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnc-ccief-j Search vendor "Mitsubishielectric" for product "Sw1dnc-ccief-j" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnc-ccief-b Firmware Search vendor "Mitsubishielectric" for product "Sw1dnc-ccief-b Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnc-ccief-b Search vendor "Mitsubishielectric" for product "Sw1dnc-ccief-b" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnc-mnetg-b Firmware Search vendor "Mitsubishielectric" for product "Sw1dnc-mnetg-b Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnc-mnetg-b Search vendor "Mitsubishielectric" for product "Sw1dnc-mnetg-b" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnc-qsccf-b Firmware Search vendor "Mitsubishielectric" for product "Sw1dnc-qsccf-b Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnc-qsccf-b Search vendor "Mitsubishielectric" for product "Sw1dnc-qsccf-b" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnd-emsdk-b Firmware Search vendor "Mitsubishielectric" for product "Sw1dnd-emsdk-b Firmware" | * | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Sw1dnd-emsdk-b Search vendor "Mitsubishielectric" for product "Sw1dnd-emsdk-b" | - | - |
Safe
|
| Jungo Search vendor "Jungo" | Windriver Search vendor "Jungo" for product "Windriver" | < 12.2.0 Search vendor "Jungo" for product "Windriver" and version " < 12.2.0" | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Cpu Module Logging Configuration Tool Search vendor "Mitsubishielectric" for product "Cpu Module Logging Configuration Tool" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Cw Configurator Search vendor "Mitsubishielectric" for product "Cw Configurator" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Data Transfer Search vendor "Mitsubishielectric" for product "Data Transfer" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Data Transfer Classic Search vendor "Mitsubishielectric" for product "Data Transfer Classic" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Ezsocket Search vendor "Mitsubishielectric" for product "Ezsocket" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fr Configurator Sw3 Search vendor "Mitsubishielectric" for product "Fr Configurator Sw3" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fr Configurator2 Search vendor "Mitsubishielectric" for product "Fr Configurator2" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Genesis64 Search vendor "Mitsubishielectric" for product "Genesis64" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Got1000 Search vendor "Mitsubishielectric" for product "Gt Got1000" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Got2000 Search vendor "Mitsubishielectric" for product "Gt Got2000" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Softgot1000 Search vendor "Mitsubishielectric" for product "Gt Softgot1000" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gt Softgot2000 Search vendor "Mitsubishielectric" for product "Gt Softgot2000" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gx Developer Search vendor "Mitsubishielectric" for product "Gx Developer" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gx Logviewer Search vendor "Mitsubishielectric" for product "Gx Logviewer" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gx Works2 Search vendor "Mitsubishielectric" for product "Gx Works2" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Gx Works3 Search vendor "Mitsubishielectric" for product "Gx Works3" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Iq Works Search vendor "Mitsubishielectric" for product "Iq Works" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mi Configurator Search vendor "Mitsubishielectric" for product "Mi Configurator" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mr Configurator Search vendor "Mitsubishielectric" for product "Mr Configurator" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mr Configurator2 Search vendor "Mitsubishielectric" for product "Mr Configurator2" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mx Component Search vendor "Mitsubishielectric" for product "Mx Component" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Mx Opc Server Da\/ua Search vendor "Mitsubishielectric" for product "Mx Opc Server Da\/ua" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Numerical Control Device Communication Search vendor "Mitsubishielectric" for product "Numerical Control Device Communication" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Px Developer\/monitor Tool Search vendor "Mitsubishielectric" for product "Px Developer\/monitor Tool" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rt Toolbox3 Search vendor "Mitsubishielectric" for product "Rt Toolbox3" | * | - |
Affected
| ||||||
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rt Visualbox Search vendor "Mitsubishielectric" for product "Rt Visualbox" | * | - |
Affected
| ||||||