CVE-2024-8299: Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions Hyper Historian versions 10.97.3 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS32 all versions allows a local authenticated attacker to execute a malicious code by storing a specially crafted DLL in a specific folder. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or to cause a denial of service (DoS) condition on the products.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8299?
CVE-2024-8299 is classified as a high-severity vulnerability due to its potential for local code execution by an authenticated attacker.
How do I fix CVE-2024-8299?
To mitigate CVE-2024-8299, ensure that all software versions of ICONICS GENESIS64, Mitsubishi Electric GENESIS64, and Mitsubishi Electric MC Works64 are updated to the latest patched versions provided by the vendors.
Who is affected by CVE-2024-8299?
CVE-2024-8299 affects all versions of ICONICS GENESIS64 and Mitsubishi Electric GENESIS64 and MC Works64.
What type of attack does CVE-2024-8299 facilitate?
CVE-2024-8299 facilitates a local authenticated attack that allows the execution of malicious code through a specially crafted DLL.
Is user authentication required to exploit CVE-2024-8299?
Yes, an attacker must have local authenticated access to exploit CVE-2024-8299.