high
7.8
CWE
269 94
Advisory Published
Updated

CVE-2024-25086: Code Injection

First published: Tue Jul 02 2024(Updated: )

Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Jungo WinDriver<12.2.0
Mitsubishi Electric CPU Module Logging Configuration Tool
Mitsubishi Electric CW Configurator
Mitsubishi Electric Data Transfer
Mitsubishi Electric Data Transfer Classic
Mitsubishi Electric EZSocket
Mitsubishi Electric FR Configurator SW3
Mitsubishi Electric FR Configurator2 Firmware
Mitsubishi Electric GENESIS64
Mitsubishi Electric GT SoftGOT1000
Mitsubishielectric GOT2000
Mitsubishi Electric GT SoftGOT1000
Mitsubishi Electric GT SoftGOT2000
Mitsubishi Electric GX Developer
Mitsubishi Electric GX LogViewer
Mitsubishi Electric GX Works2
Mitsubishi Electric GX Works3
Mitsubishi Electric Iq Works
Mitsubishi Electric MI Configurator
Mitsubishi Electric MR Configurator
Mitsubishi Electric MR Configurator2
Mitsubishi Electric MX Component
Mitsubishi Electric MX OPC Server DA/UA
Mitsubishi Electric Numerical Control Device Communication
Mitsubishi Electric PX Developer/Monitor Tool
Mitsubishi Electric RT Toolbox 3
Mitsubishi Electric RT VisualBox
All of
Mitsubishi Electric MRZJW3-MC2-UTL
Mitsubishi Electric MRZJW3-MC2-UTL
All of
Mitsubishi Electric SW0DNC-MNETH-B Firmware
Mitsubishi Electric SW0DNC-MNETH-B Firmware
All of
Mitsubishi Electric SW1DNC-CCBD2-B
Mitsubishi Electric SW1DNC-CCBD2-B
All of
Mitsubishi Electric SW1DNC-CCIEF-J
Mitsubishi Electric SW1DNC-CCIEF-J
All of
Mitsubishi Electric SW1DNC-CCIEF-B Firmware
Mitsubishi Electric SW1DNC-CCIEF-B Firmware
All of
Mitsubishi Electric SW1DNC-MNETG-B Firmware
Mitsubishi Electric SW1DNC-MNETG-B Firmware
All of
Mitsubishi Electric SW1DNC-QSCCF-B
Mitsubishi Electric SW1DNC-QSCCF-B
All of
Mitsubishi Electric SW1DND-EMSDK-B
Mitsubishi Electric SW1DND-EMSDK-B

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2024-25086?

    CVE-2024-25086 is classified with a high severity due to its potential for privilege escalation and arbitrary code execution.

  • What are the potential impacts of CVE-2024-25086?

    The impact of CVE-2024-25086 includes unauthorized access and control over the affected systems, leading to security breaches.

  • How do I fix CVE-2024-25086?

    To resolve CVE-2024-25086, users should update to Jungo WinDriver version 12.2.0 or later.

  • Which software is affected by CVE-2024-25086?

    CVE-2024-25086 affects Jungo WinDriver versions prior to 12.2.0 and multiple Mitsubishi Electric software products.

  • Who is at risk of CVE-2024-25086?

    Local attackers with access to the affected systems are at risk of exploiting CVE-2024-25086.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203