CVE-2024-26314: High severity jungo windriver vulnerability

Published Jul 2, 2024
·
Updated

Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code.

Affected Software

43 affected components
Jungo Windriver>=6.0.0<16.2.0
Mitsubishielectric Cpu Module Logging Configuration Tool
Mitsubishielectric Cw Configurator
Mitsubishielectric Data Transfer
Mitsubishielectric Data Transfer Classic
Mitsubishielectric Ezsocket
Mitsubishielectric Fr Configurator Sw3
Mitsubishielectric Fr Configurator2
Mitsubishielectric Genesis64
Mitsubishielectric Gt Got1000
Mitsubishielectric Gt Got2000
Mitsubishielectric Gt Softgot1000
Mitsubishielectric Gt Softgot2000
Mitsubishielectric Gx Developer
Mitsubishielectric Gx Logviewer
Mitsubishielectric Gx Works2
Mitsubishielectric Gx Works3
Mitsubishielectric Iq Works
Mitsubishielectric Mi Configurator
Mitsubishielectric Mr Configurator
Mitsubishielectric Mr Configurator2
Mitsubishielectric Mx Component
Mitsubishielectric Mx Opc Server Da\/ua
Mitsubishielectric Numerical Control Device Communication
Mitsubishielectric Px Developer\/monitor Tool
Mitsubishielectric Rt Toolbox3
Mitsubishielectric Rt Visualbox
All of the following
Mitsubishielectric Mrzjw3-mc2-utl Firmware
Mitsubishielectric Mrzjw3-mc2-utl
All of the following
Mitsubishielectric Sw0dnc-mneth-b Firmware
Mitsubishielectric Sw0dnc-mneth-b
All of the following
Mitsubishielectric Sw1dnc-ccbd2-b Firmware
Mitsubishielectric Sw1dnc-ccbd2-b
All of the following
Mitsubishielectric Sw1dnc-ccief-j Firmware
Mitsubishielectric Sw1dnc-ccief-j
All of the following
Mitsubishielectric Sw1dnc-ccief-b Firmware
Mitsubishielectric Sw1dnc-ccief-b
All of the following
Mitsubishielectric Sw1dnc-mnetg-b Firmware
Mitsubishielectric Sw1dnc-mnetg-b
All of the following
Mitsubishielectric Sw1dnc-qsccf-b Firmware
Mitsubishielectric Sw1dnc-qsccf-b
All of the following
Mitsubishielectric Sw1dnd-emsdk-b Firmware
Mitsubishielectric Sw1dnd-emsdk-b

Event History

Jul 2, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2024-26314?

CVE-2024-26314 has a high severity rating due to the potential for local attackers to escalate privileges and execute arbitrary code.

2

How do I fix CVE-2024-26314?

To mitigate CVE-2024-26314, upgrade to a version of Jungo WinDriver that is above 16.2.0 or apply any recommended patches from the vendor.

3

What systems are affected by CVE-2024-26314?

CVE-2024-26314 affects Jungo WinDriver versions 6.0.0 through 16.1.0 and several Mitsubishi Electric applications.

4

Can CVE-2024-26314 be exploited remotely?

CVE-2024-26314 requires local access for exploitation, making it a local privilege escalation vulnerability.

5

What impact does CVE-2024-26314 have on systems?

CVE-2024-26314 can allow an attacker to gain elevated privileges, leading to arbitrary code execution on the affected system.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203