CVE-2021-20587

CVE-2021-20587 is a heap-based buffer overflow in Mitsubishi Electric FA Engineering Software products (numerous tools such as CPU Module Logging Configuration Tool, CW Configurator, Data Transfer, EZSocket, FR Configurator family, GT Designer3/GOT variants, GX/GX Works, MELSOFT EM/Navigator, etc...

CVE-2021-20588

CVE-2021-20588 concerns an improper handling of length parameter inconsistency in Mitsubishi Electric FA Engineering Software. A remote, unauthenticated attacker can cause a DoS on affected software by spoofing MELSEC, GOT or FREQROL and returning crafted replies; exploitation may potentially lea...

CVE-2020-14521

CVE-2020-14521 affects Mitsubishi Electric Factory Automation engineering software and is a vulnerability in unquoted search path or element (CWE-428) that can lead to remote code execution with high impact. Public sources indicate affected Mitsubishi products span a wide range of engineering uti...

CVE-2024-25086

CVE-2024-25086 affects Jungo WinDriver pre-12.2.0. The issue is improper privilege management (CWE-269), enabling a local attacker to escalate privileges and execute arbitrary code. Affected: Jungo WinDriver versions before 12.2.0. Impact: local privilege escalation and code execution; no remote ...

CVE-2020-14496

CVE-2020-14496 is a permissions-based vulnerability in Mitsubishi Electric Factory Automation Engineering Software products. In affected products (e.g., CPU Module Logging Configuration Tool, CW/FR Configurators, EZSocket, GT Designer3, GX Works2/3, MELSOFT tools, Data Transfer, etc.), incorrect ...

CVE-2024-22104

CVE-2024-22104 is a local, out-of-bounds write vulnerability in Jungo WinDriver prior to version 12.5.1. The issue allows a local attacker to trigger a Windows blue screen and a Denial of Service (DoS). The vulnerability is caused by an out-of-bounds write in affected WinDriver components, enabli...

CVE-2024-25087

CVE-2024-25087 is a DoS vulnerability in Jungo WinDriver prior to version 12.7.0 that allows a local attacker to trigger a Windows blue screen. Affected software: Jungo WinDriver (pre-12.7.0). Root cause: denial-of-service condition leading to BSOD when vulnerable components are exploited locally...

CVE-2024-22106

Jungo WinDriver is affected by CVE-2024-22106 (prior to 12.5.1). The issue is improper privilege management (CWE-269) that enables a local attacker to escalate privileges, execute arbitrary code, or cause a Denial of Service. The vulnerability affects WinDriver components and device driver develo...

CVE-2023-51777

CVE-2023-51777 is a DoS vulnerability in Jungo WinDriver prior to version 12.1.0 that allows a local attacker to trigger a Windows blue screen. The Red Hat and CNVD entries corroborate a local DoS outcome stemming from this flaw in Jungo WinDriver; Mitsubishi Electric ICS advisory materials also ...

CVE-2024-22105

CVE-2024-22105 affects Jungo WinDriver prior to 12.5.1. The DoS condition is caused by a vulnerability that can allow local attackers to trigger a Windows blue screen. Impact is an availability denial-of-service, with local attack vector and low privileges required as per the provided metrics. Co...

CVE-2024-26314

CVE-2024-26314 describes an ** Improper Privilege Management CWE-269** in Jungo WinDriver versions 6.0.0 through 16.1.0. The vulnerability allows a local attacker to escalate privileges and execute arbitrary code on affected systems. The root cause, as documented across multiple sources, is a pri...

CVE-2024-25088

CVE-2024-25088 affects Jungo WinDriver prior to 12.5.1. The issue is improper privilege management that enables a local attacker to escalate privileges and execute arbitrary code. Public sources consistently identify local privilege escalation as the impact; no remote exploitation is indicated. M...

CVE-2023-51776

The CVE-2023-51776 issue is an improper privilege management vulnerability in Jungo WinDriver prior to version 12.1.0, enabling a local attacker to escalate privileges and execute arbitrary code. Affected software is Jungo WinDriver (device driver toolkit); root cause is incorrect privilege handl...

CVE-2024-22102

Jungo WinDriver prior to 12.6.0 contains a Denial of Service vulnerability that can be triggered by a local attacker to cause a Windows blue screen. The available documents identify the affected product and the DoS impact but do not detail the exact root cause in the provided sources. Mitigation ...

CVE-2024-22103

CVE-2024-22103 affects Jungo WinDriver up to version 12.5.x (fixed in 12.6.0). The vulnerability is an out-of-bounds write in the WinDriver toolkit, enabling a local attacker to trigger a Windows blue screen and a Denial of Service. The issue is local, requires physical or remote access with user...

CVE-2023-51778

CVE-2023-51778 affects Jungo WinDriver up to version 12.0.x? Correction: affected are WinDriver prior to 12.1.0. The vulnerability is an out-of-bounds write (CWE-787) that allows a local attacker to trigger a Windows blue screen (BSOD) and a Denial of Service. Public sources in connected document...