Vulnerabilities > CVE-2024-25088

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

jungo

mitsubishielectric

NVD

Published: 2024-07-02

Updated: 2024-11-21

Summary

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code.

Vulnerable Configurations

Part	Description	Count
Application	Jungo Jungo Windriver 2.1.0 Jungo Windriver 2.1.1 Jungo Windriver 2.1.2 Jungo Windriver 3.0.0 Jungo Windriver 3.0.1 Jungo Windriver 3.0.2 Jungo Windriver 3.0.3 Jungo Windriver 4.0 Jungo Windriver 4.1.0-4.1.2 Jungo Windriver 4.1.4 Jungo Windriver 4.2.0 Jungo Windriver 4.3.0 Jungo Windriver 4.3.1 Jungo Windriver 4.3.2 Jungo Windriver 4.3.3 Jungo Windriver 5.0.0 Jungo Windriver 5.0.1 Jungo Windriver 5.0.2 Jungo Windriver 5.0.3 Jungo Windriver 5.0.4 Jungo Windriver 5.0.5 Jungo Windriver 5.0.5B Jungo Windriver 5.2.0 Jungo Windriver 5.2.1 Jungo Windriver 5.2.2 Jungo Windriver 6.0.0 Jungo Windriver 6.0.1 Jungo Windriver 6.0.2 Jungo Windriver 6.0.3 Jungo Windriver 6.2.0 Jungo Windriver 6.2.1 Jungo Windriver 6.2.2 Jungo Windriver 6.2.3 Jungo Windriver 7.0.0 Jungo Windriver 7.0.1 Jungo Windriver 7.0.2 Jungo Windriver 8.0.0 Jungo Windriver 8.0.1 Jungo Windriver 8.0.2 Jungo Windriver 8.1.0 Jungo Windriver 8.1.1 Jungo Windriver 9.0.0 Jungo Windriver 9.0.1 Jungo Windriver 9.1.0 Jungo Windriver 9.2.0 Jungo Windriver 9.2.1 Jungo Windriver 10.0.0 Jungo Windriver 10.0.1 Jungo Windriver 10.0.2 Jungo Windriver 10.1.0 Jungo Windriver 10.1.1 Jungo Windriver 10.2.0 Jungo Windriver 10.2.1 Jungo Windriver 10.3.0 Jungo Windriver 10.3.1 Jungo Windriver 10.4.0 Jungo Windriver 11.0.0 Jungo Windriver 11.1.0 Jungo Windriver 11.2.0 Jungo Windriver 11.3.0 Jungo Windriver 11.4.0 Jungo Windriver 11.5.0 Jungo Windriver 11.6.0 Jungo Windriver 11.7.0 Jungo Windriver 11.8.0 Jungo Windriver 11.9.0 Jungo Windriver 12.0.0 Jungo Windriver 12.1.0 Jungo Windriver 12.2.0 Jungo Windriver 12.2.1 Jungo Windriver 12.3.0 Jungo Windriver 12.4.0	72
Application	Mitsubishielectric Mitsubishielectric CPU Module Logging Configuration Tool * Mitsubishielectric CW Configurator * Mitsubishielectric Data Transfer * Mitsubishielectric Ezsocket * Mitsubishielectric FR Configurator SW3 * Mitsubishielectric FR Configurator2 * Mitsubishielectric GT Got1000 * Mitsubishielectric GT Got2000 * Mitsubishielectric GT Softgot1000 * Mitsubishielectric GT Softgot2000 * Mitsubishielectric GX Developer * Mitsubishielectric GX Logviewer * Mitsubishielectric MI Configurator * Mitsubishielectric MX Component * Mitsubishielectric RT Toolbox3 * Mitsubishielectric GX Works3 * Mitsubishielectric GX Works2 * Mitsubishielectric Data Transfer Classic * Mitsubishielectric Genesis64 * Mitsubishielectric IQ Works * Mitsubishielectric Numerical Control Device Communication * Mitsubishielectric MR Configurator * Mitsubishielectric MR Configurator2 * Mitsubishielectric MX OPC Server Da/Ua * Mitsubishielectric PX Developer/Monitor Tool * Mitsubishielectric RT Visualbox *	26
OS	Mitsubishielectric Mitsubishielectric Mrzjw3 MC2 UTL Firmware * Mitsubishielectric Sw0Dnc Mneth B Firmware * Mitsubishielectric Sw1Dnc Ccbd2 B Firmware * Mitsubishielectric Sw1Dnc Ccief J Firmware * Mitsubishielectric Sw1Dnc Ccief B Firmware * Mitsubishielectric Sw1Dnc Mnetg B Firmware * Mitsubishielectric Sw1Dnc Qsccf B Firmware * Mitsubishielectric Sw1Dnd Emsdk B Firmware *	8
Hardware	Mitsubishielectric Mitsubishielectric Mrzjw3 MC2 UTL - Mitsubishielectric Sw0Dnc Mneth B - Mitsubishielectric Sw1Dnc Ccbd2 B - Mitsubishielectric Sw1Dnc Ccief J - Mitsubishielectric Sw1Dnc Ccief B - Mitsubishielectric Sw1Dnc Mnetg B - Mitsubishielectric Sw1Dnc Qsccf B - Mitsubishielectric Sw1Dnd Emsdk B -	8

Vulnerabilities > CVE-2024-25088 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2024-25088"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2024-25088