high7.8
CVE-2024-25086
Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code.
Impact
Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jungo | Windriver | before 12.2.0 |
| Mitsubishielectric | Cpu Module Logging Configuration Tool | All versions |
| Mitsubishielectric | Cw Configurator | All versions |
| Mitsubishielectric | Data Transfer | All versions |
| Mitsubishielectric | Data Transfer Classic | All versions |
| Mitsubishielectric | Ezsocket | All versions |
| Mitsubishielectric | Fr Configurator Sw3 | All versions |
| Mitsubishielectric | Fr Configurator2 | All versions |
| Mitsubishielectric | Genesis64 | All versions |
| Mitsubishielectric | Gt Got1000 | All versions |
| Mitsubishielectric | Gt Got2000 | All versions |
| Mitsubishielectric | Gt Softgot1000 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://jungo.com/windriver/versions/
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf
- https://jungo.com/windriver/versions/
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf