CVE-2021-20587

CVE-2021-20587 is a heap-based buffer overflow in Mitsubishi Electric FA Engineering Software products (numerous tools such as CPU Module Logging Configuration Tool, CW Configurator, Data Transfer, EZSocket, FR Configurator family, GT Designer3/GOT variants, GX/GX Works, MELSOFT EM/Navigator, etc...

CVE-2021-20588

CVE-2021-20588 concerns an improper handling of length parameter inconsistency in Mitsubishi Electric FA Engineering Software. A remote, unauthenticated attacker can cause a DoS on affected software by spoofing MELSEC, GOT or FREQROL and returning crafted replies; exploitation may potentially lea...

CVE-2020-14521

CVE-2020-14521 affects Mitsubishi Electric Factory Automation engineering software and is a vulnerability in unquoted search path or element (CWE-428) that can lead to remote code execution with high impact. Public sources indicate affected Mitsubishi products span a wide range of engineering uti...

CVE-2024-25086

CVE-2024-25086 affects Jungo WinDriver pre-12.2.0. The issue is improper privilege management (CWE-269), enabling a local attacker to escalate privileges and execute arbitrary code. Affected: Jungo WinDriver versions before 12.2.0. Impact: local privilege escalation and code execution; no remote ...

CVE-2020-14496

CVE-2020-14496 is a permissions-based vulnerability in Mitsubishi Electric Factory Automation Engineering Software products. In affected products (e.g., CPU Module Logging Configuration Tool, CW/FR Configurators, EZSocket, GT Designer3, GX Works2/3, MELSOFT tools, Data Transfer, etc.), incorrect ...

CVE-2024-22104

CVE-2024-22104 is a local, out-of-bounds write vulnerability in Jungo WinDriver prior to version 12.5.1. The issue allows a local attacker to trigger a Windows blue screen and a Denial of Service (DoS). The vulnerability is caused by an out-of-bounds write in affected WinDriver components, enabli...

CVE-2020-14523

CVE-2020-14523 is a path traversal vulnerability (CWE-22) affecting multiple Mitsubishi Electric Factory Automation products. The issue allows an attacker to execute arbitrary code remotely (network access, no authentication, low complexity per NVD CVSS v3.1: base score 9.8 / 10; ICS score 8.3). ...

CVE-2023-6943

CVE-2023-6943 affects Mitsubishi Electric FA Engineering Software: EZSocket (v3.0–5.92), FR Configurator2 (all), GT Designer3 GOT1000 (all up to 1.325P), GT Designer3 GOT2000 (up to 1.320J), GX Works2 (1.11M+), GX Works3 (all), MELSOFT Navigator (1.04E–2.102G), MT Works2 (all), MX Component (4.00...

CVE-2024-25087

CVE-2024-25087 is a DoS vulnerability in Jungo WinDriver prior to version 12.7.0 that allows a local attacker to trigger a Windows blue screen. Affected software: Jungo WinDriver (pre-12.7.0). Root cause: denial-of-service condition leading to BSOD when vulnerable components are exploited locally...

CVE-2023-6942

CVE-2023-6942 is a Missing Authentication for Critical Function vulnerability affecting Mitsubishi Electric FA Engineering Software Products, including EZSocket (3.0–5.92), FR Configurator2, GT Designer3 (GOT1000 1.x up to 1.325P, GOT2000 1.x up to 1.320J), GX Works2 (1.11M+), GX Works3, MELSOFT ...

CVE-2024-22106

Jungo WinDriver is affected by CVE-2024-22106 (prior to 12.5.1). The issue is improper privilege management (CWE-269) that enables a local attacker to escalate privileges, execute arbitrary code, or cause a Denial of Service. The vulnerability affects WinDriver components and device driver develo...

CVE-2023-51777

CVE-2023-51777 is a DoS vulnerability in Jungo WinDriver prior to version 12.1.0 that allows a local attacker to trigger a Windows blue screen. The Red Hat and CNVD entries corroborate a local DoS outcome stemming from this flaw in Jungo WinDriver; Mitsubishi Electric ICS advisory materials also ...

CVE-2024-26314

CVE-2024-26314 describes an ** Improper Privilege Management CWE-269** in Jungo WinDriver versions 6.0.0 through 16.1.0. The vulnerability allows a local attacker to escalate privileges and execute arbitrary code on affected systems. The root cause, as documented across multiple sources, is a pri...

CVE-2024-22105

CVE-2024-22105 affects Jungo WinDriver prior to 12.5.1. The DoS condition is caused by a vulnerability that can allow local attackers to trigger a Windows blue screen. Impact is an availability denial-of-service, with local attack vector and low privileges required as per the provided metrics. Co...

CVE-2024-25088

CVE-2024-25088 affects Jungo WinDriver prior to 12.5.1. The issue is improper privilege management that enables a local attacker to escalate privileges and execute arbitrary code. Public sources consistently identify local privilege escalation as the impact; no remote exploitation is indicated. M...

CVE-2023-51776

The CVE-2023-51776 issue is an improper privilege management vulnerability in Jungo WinDriver prior to version 12.1.0, enabling a local attacker to escalate privileges and execute arbitrary code. Affected software is Jungo WinDriver (device driver toolkit); root cause is incorrect privilege handl...

CVE-2024-22102

Jungo WinDriver prior to 12.6.0 contains a Denial of Service vulnerability that can be triggered by a local attacker to cause a Windows blue screen. The available documents identify the affected product and the DoS impact but do not detail the exact root cause in the provided sources. Mitigation ...

CVE-2024-22103

CVE-2024-22103 affects Jungo WinDriver up to version 12.5.x (fixed in 12.6.0). The vulnerability is an out-of-bounds write in the WinDriver toolkit, enabling a local attacker to trigger a Windows blue screen and a Denial of Service. The issue is local, requires physical or remote access with user...

CVE-2023-51778

CVE-2023-51778 affects Jungo WinDriver up to version 12.0.x? Correction: affected are WinDriver prior to 12.1.0. The vulnerability is an out-of-bounds write (CWE-787) that allows a local attacker to trigger a Windows blue screen (BSOD) and a Denial of Service. Public sources in connected document...