CVE-2024-22104
02.07.2024, 15:15
Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).Enginsight
| Vendor | Product | Version |
|---|---|---|
| jungo | windriver | 𝑥 < 12.5.1 |
| mitsubishielectric | cpu_module_logging_configuration_tool | * |
| mitsubishielectric | cw_configurator | * |
| mitsubishielectric | data_transfer | * |
| mitsubishielectric | data_transfer_classic | * |
| mitsubishielectric | ezsocket | * |
| mitsubishielectric | fr_configurator_sw3 | * |
| mitsubishielectric | fr_configurator2 | * |
| mitsubishielectric | genesis64 | * |
| mitsubishielectric | gt_got1000 | * |
| mitsubishielectric | gt_got2000 | * |
| mitsubishielectric | gt_softgot1000 | * |
| mitsubishielectric | gt_softgot2000 | * |
| mitsubishielectric | gx_developer | * |
| mitsubishielectric | gx_logviewer | * |
| mitsubishielectric | gx_works2 | * |
| mitsubishielectric | gx_works3 | * |
| mitsubishielectric | iq_works | * |
| mitsubishielectric | mi_configurator | * |
| mitsubishielectric | mr_configurator | * |
| mitsubishielectric | mr_configurator2 | * |
| mitsubishielectric | mx_component | * |
| mitsubishielectric | mx_opc_server_da\/ua | * |
| mitsubishielectric | numerical_control_device_communication | * |
| mitsubishielectric | px_developer\/monitor_tool | * |
| mitsubishielectric | rt_toolbox3 | * |
| mitsubishielectric | rt_visualbox | * |
| mitsubishielectric | mrzjw3-mc2-utl_firmware | * |
| mitsubishielectric | sw0dnc-mneth-b_firmware | * |
| mitsubishielectric | sw1dnc-ccbd2-b_firmware | * |
| mitsubishielectric | sw1dnc-ccief-j_firmware | * |
| mitsubishielectric | sw1dnc-ccief-b_firmware | * |
| mitsubishielectric | sw1dnc-mnetg-b_firmware | * |
| mitsubishielectric | sw1dnc-qsccf-b_firmware | * |
| mitsubishielectric | sw1dnd-emsdk-b_firmware | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
References