← Back

CVE-2024-25086

nvd nist
Published: Jul 2, 2024Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code.

Affected (35)

Jungo
1 product
Windriver
Mitsubishielectric
34 products
Cpu Module Logging Configuration Tool
Cw Configurator
Data Transfer
Data Transfer Classic
Ezsocket
Fr Configurator2
Fr Configurator Sw3
Genesis64
Gt Got1000
Gt Got2000
Gt Softgot1000
Gt Softgot2000
Gx Developer
Gx Logviewer
Gx Works2
Gx Works3
Iq Works
Mi Configurator
Mr Configurator
Mr Configurator2
Mx Component
Mx Opc Server Da/ua
Numerical Control Device Communication
Px Developer/monitor Tool
Rt Toolbox3
Rt Visualbox
Mrzjw3 Mc2 Utl Firmware
Sw0dnc Mneth B Firmware
Sw1dnc Ccbd2 B Firmware
Sw1dnc Ccief J Firmware
Sw1dnc Ccief B Firmware
Sw1dnc Mnetg B Firmware
Sw1dnc Qsccf B Firmware
Sw1dnd Emsdk B Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Windriver
Before 12.2.0
Configuration B
26 vulnerable
Vulnerable SoftwareAffected Versions
Cpu Module Logging Configuration Tool
All versions
Cw Configurator
All versions
Data Transfer
All versions
Data Transfer Classic
All versions
Ezsocket
All versions
Fr Configurator2
All versions
Fr Configurator Sw3
All versions
Genesis64
All versions
Gt Got1000
All versions
Gt Got2000
All versions
Gt Softgot1000
All versions
Gt Softgot2000
All versions
Gx Developer
All versions
Gx Logviewer
All versions
Gx Works2
All versions
Gx Works3
All versions
Iq Works
All versions
Mi Configurator
All versions
Mr Configurator
All versions
Mr Configurator2
All versions
Mx Component
All versions
Mx Opc Server Da/ua
All versions
Numerical Control Device Communication
All versions
Px Developer/monitor Tool
All versions
Rt Toolbox3
All versions
Rt Visualbox
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mrzjw3 Mc2 Utl Firmware
All versions
Running on/withPlatform Versions
Mitsubishielectric
Mrzjw3 Mc2 Utl
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sw0dnc Mneth B Firmware
All versions
Running on/withPlatform Versions
Mitsubishielectric
Sw0dnc Mneth B
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sw1dnc Ccbd2 B Firmware
All versions
Running on/withPlatform Versions
Mitsubishielectric
Sw1dnc Ccbd2 B
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sw1dnc Ccief J Firmware
All versions
Running on/withPlatform Versions
Mitsubishielectric
Sw1dnc Ccief J
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sw1dnc Ccief B Firmware
All versions
Running on/withPlatform Versions
Mitsubishielectric
Sw1dnc Ccief B
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sw1dnc Mnetg B Firmware
All versions
Running on/withPlatform Versions
Mitsubishielectric
Sw1dnc Mnetg B
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sw1dnc Qsccf B Firmware
All versions
Running on/withPlatform Versions
Mitsubishielectric
Sw1dnc Qsccf B
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sw1dnd Emsdk B Firmware
All versions
Running on/withPlatform Versions
Mitsubishielectric
Sw1dnd Emsdk B
All versions

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (6)

Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
Third Party AdvisoryUS Government Resource
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.