CVE-2024-22106

🗓️ 02 Jul 2024 00:00:00Reported by mitreType

Improper privilege management in Jungo WinDriver allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service (DoS)

Reporter	Title	Published	Views	Family All 6
CNNVD	Jungo WinDriver 安全漏洞	2 Jul 202400:00	–	cnnvd
CNVD	Jungo WinDriver Privilege Management Error Vulnerability (CNVD-2024-34418)	5 Jul 202400:00	–	cnvd
Cvelist	CVE-2024-22106	2 Jul 202400:00	–	cvelist
NVD	CVE-2024-22106	2 Jul 202416:15	–	nvd
RedhatCVE	CVE-2024-22106	23 May 202508:58	–	redhatcve
Vulnrichment	CVE-2024-22106	2 Jul 202400:00	–	vulnrichment

NVD

Vulnrichment

Node

jungo windriverRange<12.5.1

Node

mitsubishielectric cpu_module_logging_configuration_tool

mitsubishielectric cw_configurator

mitsubishielectric data_transfer

mitsubishielectric data_transfer_classic

mitsubishielectric ezsocket

mitsubishielectric fr_configurator_sw3

mitsubishielectric fr_configurator2

mitsubishielectric genesis64

mitsubishielectric gt_got1000

mitsubishielectric gt_got2000

mitsubishielectric gt_softgot1000

mitsubishielectric gt_softgot2000

mitsubishielectric gx_developer

mitsubishielectric gx_logviewer

mitsubishielectric gx_works2

mitsubishielectric gx_works3

mitsubishielectric iq_works

mitsubishielectric mi_configurator

mitsubishielectric mr_configurator

mitsubishielectric mr_configurator2

mitsubishielectric mx_component

mitsubishielectric mx_opc_server_da/ua

mitsubishielectric numerical_control_device_communication

mitsubishielectric px_developer/monitor_tool

mitsubishielectric rt_toolbox3

mitsubishielectric rt_visualbox

Node

mitsubishielectric mrzjw3-mc2-utl_firmware

AND

mitsubishielectric mrzjw3-mc2-utlMatch-

Node

mitsubishielectric sw0dnc-mneth-b_firmware

AND

mitsubishielectric sw0dnc-mneth-bMatch-

Node

mitsubishielectric sw1dnc-ccbd2-b_firmware

AND

mitsubishielectric sw1dnc-ccbd2-bMatch-

Node

mitsubishielectric sw1dnc-ccief-j_firmware

AND

mitsubishielectric sw1dnc-ccief-jMatch-

Node

mitsubishielectric sw1dnc-ccief-b_firmware

AND

mitsubishielectric sw1dnc-ccief-bMatch-

Node

mitsubishielectric sw1dnc-mnetg-b_firmware

AND

mitsubishielectric sw1dnc-mnetg-bMatch-

Node

mitsubishielectric sw1dnc-qsccf-b_firmware

AND

mitsubishielectric sw1dnc-qsccf-bMatch-

Node

mitsubishielectric sw1dnd-emsdk-b_firmware

AND

mitsubishielectric sw1dnd-emsdk-bMatch-

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
jungo	www.jungo.com/windriver/versions/
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf

21 Nov 2024 08:55Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8 - 8.8

EPSS0.00061

SSVC

CWE-269