high
7.8
CWE
269
Advisory Published
Updated

CVE-2024-25088

First published: Tue Jul 02 2024(Updated: )

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Jungo WinDriver<12.5.1
Mitsubishi Electric CPU Module Logging Configuration Tool
Mitsubishi Electric CW Configurator
Mitsubishi Electric Data Transfer
Mitsubishi Electric Data Transfer Classic
Mitsubishi Electric EZSocket
Mitsubishi Electric FR Configurator SW3
Mitsubishi Electric FR Configurator2 Firmware
Mitsubishi Electric GENESIS64
Mitsubishi Electric GT SoftGOT1000
Mitsubishielectric GOT2000
Mitsubishi Electric GT SoftGOT1000
Mitsubishi Electric GT SoftGOT2000
Mitsubishi Electric GX Developer
Mitsubishi Electric GX LogViewer
Mitsubishi Electric GX Works2
Mitsubishi Electric GX Works3
Mitsubishi Electric Iq Works
Mitsubishi Electric MI Configurator
Mitsubishi Electric MR Configurator
Mitsubishi Electric MR Configurator2
Mitsubishi Electric MX Component
Mitsubishi Electric MX OPC Server DA/UA
Mitsubishi Electric Numerical Control Device Communication
Mitsubishi Electric PX Developer/Monitor Tool
Mitsubishi Electric RT Toolbox 3
Mitsubishi Electric RT VisualBox
All of
Mitsubishi Electric MRZJW3-MC2-UTL
Mitsubishi Electric MRZJW3-MC2-UTL
All of
Mitsubishi Electric SW0DNC-MNETH-B Firmware
Mitsubishi Electric SW0DNC-MNETH-B Firmware
All of
Mitsubishi Electric SW1DNC-CCBD2-B
Mitsubishi Electric SW1DNC-CCBD2-B
All of
Mitsubishi Electric SW1DNC-CCIEF-J
Mitsubishi Electric SW1DNC-CCIEF-J
All of
Mitsubishi Electric SW1DNC-CCIEF-B Firmware
Mitsubishi Electric SW1DNC-CCIEF-B Firmware
All of
Mitsubishi Electric SW1DNC-MNETG-B Firmware
Mitsubishi Electric SW1DNC-MNETG-B Firmware
All of
Mitsubishi Electric SW1DNC-QSCCF-B
Mitsubishi Electric SW1DNC-QSCCF-B
All of
Mitsubishi Electric SW1DND-EMSDK-B
Mitsubishi Electric SW1DND-EMSDK-B

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2024-25088?

    CVE-2024-25088 has a critical severity level due to its potential for local privilege escalation and arbitrary code execution.

  • How do I fix CVE-2024-25088?

    To fix CVE-2024-25088, update Jungo WinDriver to version 12.5.1 or later.

  • Which software is affected by CVE-2024-25088?

    CVE-2024-25088 affects various software products including Jungo WinDriver and multiple Mitsubishi Electric tools.

  • What kind of attack does CVE-2024-25088 facilitate?

    CVE-2024-25088 allows local attackers to escalate their privileges and execute arbitrary code on the affected systems.

  • When was CVE-2024-25088 disclosed?

    CVE-2024-25088 was disclosed in 2024, highlighting significant security concerns in the affected software versions.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203