CVE-2024-1182: High severity Mitsubishi Electric GENESIS64 vulnerability
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions Hyper Historian versions 10.97.3 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior allows a local attacker to execute a malicious code by storing a specially crafted DLL in a specific folder when GENESIS64, ICONICS Suite, Hyper Historian, GENESIS32, and MC Works64 are installed with the Pager agent in the alarm multi-agent notification feature.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1182?
CVE-2024-1182 is considered to be a high-severity vulnerability that allows local attackers to execute malicious code.
How do I fix CVE-2024-1182?
To fix CVE-2024-1182, ensure that DLL files are stored in trusted locations and implement proper file path validation.
Which software is affected by CVE-2024-1182?
CVE-2024-1182 affects all versions of ICONICS GENESIS64, Mitsubishi Electric GENESIS64, and Mitsubishi Electric MC Works64.
What are the potential consequences of exploiting CVE-2024-1182?
Exploiting CVE-2024-1182 can lead to unauthorized code execution on the host system.
Who should be concerned about CVE-2024-1182?
Organizations using ICONICS GENESIS64, Mitsubishi Electric GENESIS64, or Mitsubishi Electric MC Works64 should prioritize addressing CVE-2024-1182.