high7.8
CVE-2024-26314
Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code.
Impact
Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jungo | Windriver | from 6.0.0 before 16.2.0 |
| Mitsubishielectric | Cpu Module Logging Configuration Tool | All versions |
| Mitsubishielectric | Cw Configurator | All versions |
| Mitsubishielectric | Data Transfer | All versions |
| Mitsubishielectric | Data Transfer Classic | All versions |
| Mitsubishielectric | Ezsocket | All versions |
| Mitsubishielectric | Fr Configurator Sw3 | All versions |
| Mitsubishielectric | Fr Configurator2 | All versions |
| Mitsubishielectric | Genesis64 | All versions |
| Mitsubishielectric | Gt Got1000 | All versions |
| Mitsubishielectric | Gt Got2000 | All versions |
| Mitsubishielectric | Gt Softgot1000 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://jungo.com/windriver/versions/
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf
- https://jungo.com/windriver/versions/
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf