Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-25087 (GCVE-0-2024-25087)
Vulnerability from cvelistv5 – Published: 2024-07-02 00:00 – Updated: 2025-03-14 15:37
VLAI
EPSS
Summary
Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- n/a
- CWE-404 - Improper Resource Shutdown or Release
Assigner
References
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-25087",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-02T19:41:50.366484Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-404",
"description": "CWE-404 Improper Resource Shutdown or Release",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-14T15:37:11.649Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T23:36:21.598Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://jungo.com/windriver/versions/"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-07-02T15:47:33.372Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://jungo.com/windriver/versions/"
},
{
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-25087",
"datePublished": "2024-07-02T00:00:00.000Z",
"dateReserved": "2024-02-04T00:00:00.000Z",
"dateUpdated": "2025-03-14T15:37:11.649Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2024-25087",
"date": "2026-06-12",
"epss": "0.00119",
"percentile": "0.30557"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:jungo:windriver:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"12.7.0\", \"matchCriteriaId\": \"D1AD3035-A0C1-47C1-BBEB-10D8A93E8EC5\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"463EA623-0DC2-4287-A9AC-837CBDECF76C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E798352C-E09B-4D18-B3A8-CFCDE0AD3675\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"21CC610A-0561-46A1-9077-D01D5C3F1A8F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:data_transfer_classic:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8B36ABBC-DB27-44D1-B844-00DFC3BBF043\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C6E4BC24-6583-4791-9ED9-D2D675187DCD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D236ABC2-93E4-4428-B949-7E17945E4D98\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CED78B28-BBBF-4869-BC1C-F0789867FB4C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:genesis64:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0C79890F-0B41-4855-84EE-78D5896C87A1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:gt_got1000:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4400D339-BB12-414A-B891-B6105D7FCA39\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:gt_got2000:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6871A74E-8B92-4892-970F-757F404590CB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"03DE7DE4-DC4B-40F3-BB22-B8E524081942\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9F8037F0-C124-4EFB-AEA1-89441975D36F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:gx_developer:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9C37E74B-DA76-4E59-953E-C50D0D75804A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B0B195E2-6076-487C-899F-A40B886BA556\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6C4E7C31-D08D-487F-B7FF-9502783FFDB9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4AEDEEE-5070-41E2-B4DC-6DE8456BC028\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:iq_works:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7097AFD0-5A8C-4C62-AAF7-16FB71DE210C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A661B972-912C-4DAA-9518-CC01E0EB1A81\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:mr_configurator:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"76C1D9F0-48A8-4193-A781-B19ACE1B0B4B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9FB81A97-4BE8-4570-914F-304F38968613\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CE14782A-4AD2-4633-8A3A-D81D5C434046\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:mx_opc_server_da\\\\/ua:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4A1BABCB-EDD7-4B1D-AE49-77DD1A3CCB1C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:numerical_control_device_communication:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4F89B350-B20F-45A8-8809-E9776C319591\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:px_developer\\\\/monitor_tool:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B10E09F-84F3-42E3-9B8D-DE309ED4A4B4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7C12A1AA-66F0-452F-9B75-562F4A979CBD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mitsubishielectric:rt_visualbox:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33A13944-145E-453E-A409-BE4A984619AA\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mitsubishielectric:mrzjw3-mc2-utl_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A10A8E35-923F-483B-A924-441B78FFCF6D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:mitsubishielectric:mrzjw3-mc2-utl:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"938DDBFF-A0CC-4311-9F30-08ABDBB67742\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mitsubishielectric:sw0dnc-mneth-b_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FB49716D-8E0B-4E4C-B206-104BB64F6301\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:mitsubishielectric:sw0dnc-mneth-b:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0C8B0237-9A91-4954-AFBE-E661467D842A\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mitsubishielectric:sw1dnc-ccbd2-b_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4B3B0B5A-27F2-4E08-8B75-1EAAC4DC840D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:mitsubishielectric:sw1dnc-ccbd2-b:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0B80AF0C-EFED-4CA0-B990-0ADA6F1D0AEE\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-j_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8B4348FF-8691-4832-9103-F46282924299\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:mitsubishielectric:sw1dnc-ccief-j:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07737420-567D-49CC-9A9E-555038DFF0AA\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-b_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5D3A5D57-DB2C-429F-BB3F-8EB7F4767E1D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:mitsubishielectric:sw1dnc-ccief-b:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FD4CA442-BC30-407E-851E-E03037E75E8D\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mitsubishielectric:sw1dnc-mnetg-b_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9826969F-D449-4032-8A0B-050D7CC3B1AE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:mitsubishielectric:sw1dnc-mnetg-b:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"858F9CAA-E6D3-4F1D-923D-ED9E05C3AC54\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mitsubishielectric:sw1dnc-qsccf-b_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"61A13AD1-22F7-4FFD-BCB7-A4FDAF2BA659\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:mitsubishielectric:sw1dnc-qsccf-b:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"009853DA-ACAE-4928-AE90-090A3739BD39\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mitsubishielectric:sw1dnd-emsdk-b_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"476C7885-89D2-4A6C-94FE-E06B55A23E37\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:mitsubishielectric:sw1dnd-emsdk-b:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9DF10CF6-1C1D-4768-A349-1AEFD26F491A\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de denegaci\\u00f3n de servicio (DoS) en Jungo WinDriver anterior a 12.7.0 permite a atacantes locales provocar un error de pantalla azul de Windows.\"}]",
"id": "CVE-2024-25087",
"lastModified": "2024-11-21T09:00:13.447",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
"published": "2024-07-02T16:15:04.157",
"references": "[{\"url\": \"https://jungo.com/windriver/versions/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://jungo.com/windriver/versions/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-404\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-25087\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2024-07-02T16:15:04.157\",\"lastModified\":\"2025-03-14T16:15:29.730\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de denegaci\u00f3n de servicio (DoS) en Jungo WinDriver anterior a 12.7.0 permite a atacantes locales provocar un error de pantalla azul de Windows.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-404\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jungo:windriver:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"12.7.0\",\"matchCriteriaId\":\"D1AD3035-A0C1-47C1-BBEB-10D8A93E8EC5\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"463EA623-0DC2-4287-A9AC-837CBDECF76C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E798352C-E09B-4D18-B3A8-CFCDE0AD3675\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21CC610A-0561-46A1-9077-D01D5C3F1A8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:data_transfer_classic:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B36ABBC-DB27-44D1-B844-00DFC3BBF043\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6E4BC24-6583-4791-9ED9-D2D675187DCD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D236ABC2-93E4-4428-B949-7E17945E4D98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CED78B28-BBBF-4869-BC1C-F0789867FB4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:genesis64:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C79890F-0B41-4855-84EE-78D5896C87A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gt_got1000:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4400D339-BB12-414A-B891-B6105D7FCA39\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gt_got2000:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6871A74E-8B92-4892-970F-757F404590CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03DE7DE4-DC4B-40F3-BB22-B8E524081942\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F8037F0-C124-4EFB-AEA1-89441975D36F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gx_developer:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C37E74B-DA76-4E59-953E-C50D0D75804A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0B195E2-6076-487C-899F-A40B886BA556\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C4E7C31-D08D-487F-B7FF-9502783FFDB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4AEDEEE-5070-41E2-B4DC-6DE8456BC028\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:iq_works:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7097AFD0-5A8C-4C62-AAF7-16FB71DE210C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A661B972-912C-4DAA-9518-CC01E0EB1A81\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:mr_configurator:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76C1D9F0-48A8-4193-A781-B19ACE1B0B4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FB81A97-4BE8-4570-914F-304F38968613\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE14782A-4AD2-4633-8A3A-D81D5C434046\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:mx_opc_server_da\\\\/ua:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A1BABCB-EDD7-4B1D-AE49-77DD1A3CCB1C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:numerical_control_device_communication:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F89B350-B20F-45A8-8809-E9776C319591\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:px_developer\\\\/monitor_tool:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B10E09F-84F3-42E3-9B8D-DE309ED4A4B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C12A1AA-66F0-452F-9B75-562F4A979CBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mitsubishielectric:rt_visualbox:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33A13944-145E-453E-A409-BE4A984619AA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitsubishielectric:mrzjw3-mc2-utl_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A10A8E35-923F-483B-A924-441B78FFCF6D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitsubishielectric:mrzjw3-mc2-utl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"938DDBFF-A0CC-4311-9F30-08ABDBB67742\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitsubishielectric:sw0dnc-mneth-b_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB49716D-8E0B-4E4C-B206-104BB64F6301\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitsubishielectric:sw0dnc-mneth-b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C8B0237-9A91-4954-AFBE-E661467D842A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitsubishielectric:sw1dnc-ccbd2-b_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B3B0B5A-27F2-4E08-8B75-1EAAC4DC840D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitsubishielectric:sw1dnc-ccbd2-b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B80AF0C-EFED-4CA0-B990-0ADA6F1D0AEE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-j_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B4348FF-8691-4832-9103-F46282924299\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitsubishielectric:sw1dnc-ccief-j:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07737420-567D-49CC-9A9E-555038DFF0AA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-b_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D3A5D57-DB2C-429F-BB3F-8EB7F4767E1D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitsubishielectric:sw1dnc-ccief-b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD4CA442-BC30-407E-851E-E03037E75E8D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitsubishielectric:sw1dnc-mnetg-b_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9826969F-D449-4032-8A0B-050D7CC3B1AE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitsubishielectric:sw1dnc-mnetg-b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"858F9CAA-E6D3-4F1D-923D-ED9E05C3AC54\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitsubishielectric:sw1dnc-qsccf-b_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61A13AD1-22F7-4FFD-BCB7-A4FDAF2BA659\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitsubishielectric:sw1dnc-qsccf-b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"009853DA-ACAE-4928-AE90-090A3739BD39\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitsubishielectric:sw1dnd-emsdk-b_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"476C7885-89D2-4A6C-94FE-E06B55A23E37\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitsubishielectric:sw1dnd-emsdk-b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9DF10CF6-1C1D-4768-A349-1AEFD26F491A\"}]}]}],\"references\":[{\"url\":\"https://jungo.com/windriver/versions/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://jungo.com/windriver/versions/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://jungo.com/windriver/versions/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T23:36:21.598Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.5, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-25087\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-07-02T19:41:50.366484Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-404\", \"description\": \"CWE-404 Improper Resource Shutdown or Release\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-07-02T19:51:14.899Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"references\": [{\"url\": \"https://jungo.com/windriver/versions/\"}, {\"url\": \"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf\"}, {\"url\": \"https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2024-07-02T15:47:33.372Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-25087\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-03-14T15:37:11.649Z\", \"dateReserved\": \"2024-02-04T00:00:00.000Z\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2024-07-02T00:00:00.000Z\", \"assignerShortName\": \"mitre\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
Title
Jungo WinDriver拒绝服务漏洞(CNVD-2024-34412)
Description
Jungo WinDriver是以色列Jungo公司的一个设备驱动程序开发工具包,支持任何设备,无论其芯片供应商如何,都能够专注于驱动程序的增值功能,而不是操作系统内部。
Jungo WinDriver 12.7.0之前版本存在拒绝服务漏洞,本地攻击者可利用该漏洞导致Windows蓝屏错误。
Severity
中
Patch Name
Jungo WinDriver拒绝服务漏洞(CNVD-2024-34412)的补丁
Patch Description
Jungo WinDriver是以色列Jungo公司的一个设备驱动程序开发工具包,支持任何设备,无论其芯片供应商如何,都能够专注于驱动程序的增值功能,而不是操作系统内部。
Jungo WinDriver 12.7.0之前版本存在拒绝服务漏洞,本地攻击者可利用该漏洞导致Windows蓝屏错误。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description
厂商已发布了漏洞修复程序,请及时关注更新: https://jungo.com/windriver/zh/windriver-cn/
Reference
https://jungo.com/windriver/versions/
Impacted products
| Name | Jungo Connectivity Jungo WinDriver <12.7.0 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2024-25087",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-25087"
}
},
"description": "Jungo WinDriver\u662f\u4ee5\u8272\u5217Jungo\u516c\u53f8\u7684\u4e00\u4e2a\u8bbe\u5907\u9a71\u52a8\u7a0b\u5e8f\u5f00\u53d1\u5de5\u5177\u5305\uff0c\u652f\u6301\u4efb\u4f55\u8bbe\u5907\uff0c\u65e0\u8bba\u5176\u82af\u7247\u4f9b\u5e94\u5546\u5982\u4f55\uff0c\u90fd\u80fd\u591f\u4e13\u6ce8\u4e8e\u9a71\u52a8\u7a0b\u5e8f\u7684\u589e\u503c\u529f\u80fd\uff0c\u800c\u4e0d\u662f\u64cd\u4f5c\u7cfb\u7edf\u5185\u90e8\u3002\n\nJungo WinDriver 12.7.0\u4e4b\u524d\u7248\u672c\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4Windows\u84dd\u5c4f\u9519\u8bef\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://jungo.com/windriver/zh/windriver-cn/",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2024-34412",
"openTime": "2024-08-02",
"patchDescription": "Jungo WinDriver\u662f\u4ee5\u8272\u5217Jungo\u516c\u53f8\u7684\u4e00\u4e2a\u8bbe\u5907\u9a71\u52a8\u7a0b\u5e8f\u5f00\u53d1\u5de5\u5177\u5305\uff0c\u652f\u6301\u4efb\u4f55\u8bbe\u5907\uff0c\u65e0\u8bba\u5176\u82af\u7247\u4f9b\u5e94\u5546\u5982\u4f55\uff0c\u90fd\u80fd\u591f\u4e13\u6ce8\u4e8e\u9a71\u52a8\u7a0b\u5e8f\u7684\u589e\u503c\u529f\u80fd\uff0c\u800c\u4e0d\u662f\u64cd\u4f5c\u7cfb\u7edf\u5185\u90e8\u3002\r\n\r\nJungo WinDriver 12.7.0\u4e4b\u524d\u7248\u672c\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4Windows\u84dd\u5c4f\u9519\u8bef\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Jungo WinDriver\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2024-34412\uff09\u7684\u8865\u4e01",
"products": {
"product": "Jungo Connectivity Jungo WinDriver \u003c12.7.0"
},
"referenceLink": "https://jungo.com/windriver/versions/",
"serverity": "\u4e2d",
"submitTime": "2024-07-05",
"title": "Jungo WinDriver\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2024-34412\uff09"
}
FKIE_CVE-2024-25087
Vulnerability from fkie_nvd - Published: 2024-07-02 16:15 - Updated: 2025-03-14 16:15
Severity
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.
References
| URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | https://jungo.com/windriver/versions/ | Release Notes | |
| cve@mitre.org | https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04 | Third Party Advisory, US Government Resource | |
| cve@mitre.org | https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://jungo.com/windriver/versions/ | Release Notes | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04 | Third Party Advisory, US Government Resource | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf | Third Party Advisory |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:jungo:windriver:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D1AD3035-A0C1-47C1-BBEB-10D8A93E8EC5",
"versionEndExcluding": "12.7.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:*",
"matchCriteriaId": "463EA623-0DC2-4287-A9AC-837CBDECF76C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E798352C-E09B-4D18-B3A8-CFCDE0AD3675",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:*",
"matchCriteriaId": "21CC610A-0561-46A1-9077-D01D5C3F1A8F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:data_transfer_classic:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8B36ABBC-DB27-44D1-B844-00DFC3BBF043",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C6E4BC24-6583-4791-9ED9-D2D675187DCD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D236ABC2-93E4-4428-B949-7E17945E4D98",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CED78B28-BBBF-4869-BC1C-F0789867FB4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:genesis64:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0C79890F-0B41-4855-84EE-78D5896C87A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gt_got1000:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4400D339-BB12-414A-B891-B6105D7FCA39",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gt_got2000:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6871A74E-8B92-4892-970F-757F404590CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:*",
"matchCriteriaId": "03DE7DE4-DC4B-40F3-BB22-B8E524081942",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9F8037F0-C124-4EFB-AEA1-89441975D36F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gx_developer:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9C37E74B-DA76-4E59-953E-C50D0D75804A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B0B195E2-6076-487C-899F-A40B886BA556",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6C4E7C31-D08D-487F-B7FF-9502783FFDB9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F4AEDEEE-5070-41E2-B4DC-6DE8456BC028",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:iq_works:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7097AFD0-5A8C-4C62-AAF7-16FB71DE210C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A661B972-912C-4DAA-9518-CC01E0EB1A81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:mr_configurator:*:*:*:*:*:*:*:*",
"matchCriteriaId": "76C1D9F0-48A8-4193-A781-B19ACE1B0B4B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9FB81A97-4BE8-4570-914F-304F38968613",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CE14782A-4AD2-4633-8A3A-D81D5C434046",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:mx_opc_server_da\\/ua:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4A1BABCB-EDD7-4B1D-AE49-77DD1A3CCB1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:numerical_control_device_communication:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4F89B350-B20F-45A8-8809-E9776C319591",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:px_developer\\/monitor_tool:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2B10E09F-84F3-42E3-9B8D-DE309ED4A4B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7C12A1AA-66F0-452F-9B75-562F4A979CBD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mitsubishielectric:rt_visualbox:*:*:*:*:*:*:*:*",
"matchCriteriaId": "33A13944-145E-453E-A409-BE4A984619AA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitsubishielectric:mrzjw3-mc2-utl_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A10A8E35-923F-483B-A924-441B78FFCF6D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitsubishielectric:mrzjw3-mc2-utl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "938DDBFF-A0CC-4311-9F30-08ABDBB67742",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitsubishielectric:sw0dnc-mneth-b_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FB49716D-8E0B-4E4C-B206-104BB64F6301",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitsubishielectric:sw0dnc-mneth-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0C8B0237-9A91-4954-AFBE-E661467D842A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitsubishielectric:sw1dnc-ccbd2-b_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4B3B0B5A-27F2-4E08-8B75-1EAAC4DC840D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitsubishielectric:sw1dnc-ccbd2-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0B80AF0C-EFED-4CA0-B990-0ADA6F1D0AEE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-j_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8B4348FF-8691-4832-9103-F46282924299",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitsubishielectric:sw1dnc-ccief-j:-:*:*:*:*:*:*:*",
"matchCriteriaId": "07737420-567D-49CC-9A9E-555038DFF0AA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-b_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5D3A5D57-DB2C-429F-BB3F-8EB7F4767E1D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitsubishielectric:sw1dnc-ccief-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FD4CA442-BC30-407E-851E-E03037E75E8D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitsubishielectric:sw1dnc-mnetg-b_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9826969F-D449-4032-8A0B-050D7CC3B1AE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitsubishielectric:sw1dnc-mnetg-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "858F9CAA-E6D3-4F1D-923D-ED9E05C3AC54",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitsubishielectric:sw1dnc-qsccf-b_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "61A13AD1-22F7-4FFD-BCB7-A4FDAF2BA659",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitsubishielectric:sw1dnc-qsccf-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "009853DA-ACAE-4928-AE90-090A3739BD39",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitsubishielectric:sw1dnd-emsdk-b_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "476C7885-89D2-4A6C-94FE-E06B55A23E37",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitsubishielectric:sw1dnd-emsdk-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9DF10CF6-1C1D-4768-A349-1AEFD26F491A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error."
},
{
"lang": "es",
"value": "Vulnerabilidad de denegaci\u00f3n de servicio (DoS) en Jungo WinDriver anterior a 12.7.0 permite a atacantes locales provocar un error de pantalla azul de Windows."
}
],
"id": "CVE-2024-25087",
"lastModified": "2025-03-14T16:15:29.730",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2024-07-02T16:15:04.157",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Release Notes"
],
"url": "https://jungo.com/windriver/versions/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Release Notes"
],
"url": "https://jungo.com/windriver/versions/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-404"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
GHSA-C4XW-JCQW-FWFX
Vulnerability from github – Published: 2024-07-02 21:32 – Updated: 2024-07-05 18:34
VLAI
Details
Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.
Severity
5.5 (Medium)
{
"affected": [],
"aliases": [
"CVE-2024-25087"
],
"database_specific": {
"cwe_ids": [
"CWE-404"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-02T16:15:04Z",
"severity": "MODERATE"
},
"details": "Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error.",
"id": "GHSA-c4xw-jcqw-fwfx",
"modified": "2024-07-05T18:34:16Z",
"published": "2024-07-02T21:32:14Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25087"
},
{
"type": "WEB",
"url": "https://jungo.com/windriver/versions"
},
{
"type": "WEB",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04"
},
{
"type": "WEB",
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2024-25087
Vulnerability from gsd - Updated: 2024-02-05 06:03Details
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Aliases
{
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2024-25087"
],
"id": "GSD-2024-25087",
"modified": "2024-02-05T06:03:25.246003Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2024-25087",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}
}
}
ICSA-24-135-04
Vulnerability from csaf_cisa - Published: 2024-05-14 00:00 - Updated: 2026-06-09 06:00Summary
Mitsubishi Electric Multiple FA Engineering Software Products (Update E)
Notes
Advisory Summary: Multiple vulnerabilities due to vulnerabilities in Jungo's WinDriver in multiple FA engineering software products. Successful exploitation of these vulnerabilities may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition and/or to gain Windows system privileges and execute arbitrary commands.
Critical infrastructure sectors: Critical Manufacturing
Countries/areas deployed: Worldwide
Company headquarters location: Japan
Company headquarters location: United States
Legal Notice and Terms of Use: This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).
Advisory Conversion Disclaimer: This ICSA is a verbatim republication of Mitsubishi Electric 2024-001 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Mitsubishi Electric directly for any questions regarding this advisory.
Recommended Practices: CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
Recommended Practices: Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices: Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices: When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
4.4 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
4.4 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
4.4 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
4.4 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
4.4 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
4.4 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
4.4 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
6.0 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
4.4 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
4.4 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
4.4 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
4.4 (Medium)
Affected products
Known affected
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.154L
Mitsubishi Electric / CPU Module Logging Configuration Tool
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CSGL (GX Works2 connection configuration): <=2.5
Mitsubishi Electric / CSGL (GX Works2 connection configuration)
|
<=2.5 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CW Configurator: <=1.019V
Mitsubishi Electric / CW Configurator
|
<=1.019V |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer: <=3.58L
Mitsubishi Electric / Data Transfer
|
<=3.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Data Transfer Classic: <=1.00A
Mitsubishi Electric / Data Transfer Classic
|
<=1.00A |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric EZSocket: <=5.92
Mitsubishi Electric / EZSocket
|
<=5.92 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator SW3: vers:all/*
Mitsubishi Electric / FR Configurator SW3
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric FR Configurator2: <=1.32J
Mitsubishi Electric / FR Configurator2
|
<=1.32J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GENESIS64: <=10.97.3
Mitsubishi Electric / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.310Y
Mitsubishi Electric / GT Designer3 Version1 (GOT1000)
|
<=1.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.317F
Mitsubishi Electric / GT Designer3 Version1 (GOT2000)
|
<=1.317F |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT1000 Version3: <=3.310Y
Mitsubishi Electric / GT SoftGOT1000 Version3
|
<=3.310Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GT SoftGOT2000 Version1: <=1.315D
Mitsubishi Electric / GT SoftGOT2000 Version1
|
<=1.315D |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Developer: vers:all/*
Mitsubishi Electric / GX Developer
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX LogViewer: <=1.154L
Mitsubishi Electric / GX LogViewer
|
<=1.154L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works2: <=1.622Y
Mitsubishi Electric / GX Works2
|
<=1.622Y |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric GX Works3: <=1.106L
Mitsubishi Electric / GX Works3
|
<=1.106L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric iQ Works (MELSOFT Navigator): <=2.102G
Mitsubishi Electric / iQ Works (MELSOFT Navigator)
|
<=2.102G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MI Configurator: vers:all/*
Mitsubishi Electric / MI Configurator
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=A8
Mitsubishi Electric / Numerical Control Device Communication Software (FCSB1224)
|
<=A8 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator (SETUP221): vers:all/*
Mitsubishi Electric / MR Configurator (SETUP221)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MR Configurator2: <=1.150G
Mitsubishi Electric / MR Configurator2
|
<=1.150G |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): <=3.40
Mitsubishi Electric / Position Board Utility2 (MRZJW3-MC2-UTL)
|
<=3.40 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX Component: <=5.007H
Mitsubishi Electric / MX Component
|
<=5.007H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*
Mitsubishi Electric / MX OPC Server DA/UA (Software packaged with MC Works64)
|
vers:all/* |
No Fix Planned
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric PX Developer/Monitor Tool: <=1.58L
Mitsubishi Electric / PX Developer/Monitor Tool
|
<=1.58L |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT ToolBox3: <=2.20W
Mitsubishi Electric / RT ToolBox3
|
<=2.20W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric RT VisualBox: <=1.11M
Mitsubishi Electric / RT VisualBox
|
<=1.11M |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.14Q
Mitsubishi Electric / Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)
|
<=4.14Q |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): <=36N
Mitsubishi Electric / MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)
|
<=36N |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): <=1.25B
Mitsubishi Electric / CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)
|
<=1.25B |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): <=1.31H
Mitsubishi Electric / CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)
|
<=1.31H |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): <=2.10
Mitsubishi Electric / C Controller Interface Module utility (SW1DNC-QSCCF-B)
|
<=2.10 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): <=1.020W
Mitsubishi Electric / MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)
|
<=1.020W |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric MT Works2: <=1.200J
Mitsubishi Electric / MT Works2
|
<=1.200J |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric ICONICS Suite: <=10.97.3
Mitsubishi Electric / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): <=1.18U
Mitsubishi Electric / CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)
|
<=1.18U |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / GENESIS64
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
|
|
Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3
Mitsubishi Electric Iconics Digital Solutions / ICONICS Suite
|
<=10.97.3 |
Vendor Fix
fix
Mitigation
Mitigation
Mitigation
|
References
27 references
Acknowledgments
today-0day, BoB 12th
Jongseong Kim
Byunghyun Kang
Sangjun Park
Yunjin Park
Kwon Yul
Seungchan Kim
{
"document": {
"acknowledgments": [
{
"names": [
"Jongseong Kim",
"Byunghyun Kang",
"Sangjun Park",
"Yunjin Park",
"Kwon Yul",
"Seungchan Kim"
],
"organization": "today-0day, BoB 12th",
"summary": "reported these vulnerabilities to Mitsubishi Electric"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage"
}
},
"lang": "en-US",
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities due to vulnerabilities in Jungo\u0027s WinDriver in multiple FA engineering software products. Successful exploitation of these vulnerabilities may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition and/or to gain Windows system privileges and execute arbitrary commands. ",
"title": "Advisory Summary"
},
{
"category": "other",
"text": "Critical Manufacturing",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Japan",
"title": "Company headquarters location"
},
{
"category": "other",
"text": "United States",
"title": "Company headquarters location"
},
{
"category": "legal_disclaimer",
"text": "This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy \u0026 Use policy (https://www.cisa.gov/privacy-policy).",
"title": "Legal Notice and Terms of Use"
},
{
"category": "other",
"text": "This ICSA is a verbatim republication of Mitsubishi Electric 2024-001 from a direct conversion of the vendor\u0027s Common Security Advisory Framework (CSAF) advisory. This is republished to CISA\u0027s website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Mitsubishi Electric directly for any questions regarding this advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-24-135-04 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-135-04.json"
},
{
"category": "self",
"summary": "Mitsubishi Electric Advisory 2024-001",
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-24-135-04 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b"
}
],
"title": "Mitsubishi Electric Multiple FA Engineering Software Products (Update E)",
"tracking": {
"current_release_date": "2026-06-09T06:00:00.000000Z",
"generator": {
"date": "2026-06-03T16:44:26.508739Z",
"engine": {
"name": "CISA CSAF Generator",
"version": "1.5.0"
}
},
"id": "ICSA-24-135-04",
"initial_release_date": "2024-05-14T00:00:00.000000Z",
"revision_history": [
{
"date": "2024-05-14T00:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "Initial Publication"
},
{
"date": "2024-05-14T06:00:00.000000Z",
"legacy_version": "Additional Release 1",
"number": "2",
"summary": "CISA Republication - Initial Republication of Mitsubishi Electric 2024-001"
},
{
"date": "2024-10-31T00:00:00.000000Z",
"legacy_version": "Additional Release 2",
"number": "3",
"summary": "In the \"Affected Products\" section, the product names of Position Board Utility2 (MRZJW3-MC2-UTL), MELSECNET/H Interface Board software package (SW0DNC-MNETH-B), CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B), CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J/-B), CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B), C Controller Interface Module utility (SW1DNC-QSCCF-B), and MELSOFT EM Software Development Kit (SW1DND-EMSDK-B) have been revised. The description regarding \"Countermeasures for Customers\" has also been revised. Additionally, a \"Countermeasures for Products\" section has been added, listing the products that have been fixed."
},
{
"date": "2024-10-31T06:00:00.000000Z",
"legacy_version": "Additional Release 3",
"number": "4",
"summary": "CISA Republication - Update A - Added version information to affected product and mitigation sections."
},
{
"date": "2025-01-30T07:00:00.000000Z",
"legacy_version": "Additional Release 4",
"number": "5",
"summary": "CISA Republication - Update B - Added version information to affected product and mitigation sections."
},
{
"date": "2025-01-30T07:00:00.000000Z",
"legacy_version": "Additional Release 5",
"number": "6",
"summary": "Added guidance for products that do not provide downloadable updates to the \"Countermeasures for Customers\" section. And added the updated products such as CPU Module Logging Configuration Tool, CSGL (GX Works2 connection configuration), EZSocket, FR Configurator2, GX LogViewer, GX Works2, GX Works3, iQ Works (MELSOFT Navigator), and MX Component to the \"Countermeasures for Products\" section."
},
{
"date": "2025-05-15T00:00:00.000000Z",
"legacy_version": "Additional Release 6",
"number": "7",
"summary": "Added products for which there are no plans for release fixed versions to the \"Countermeasures for Customers\" section. And added Position Board Utility2 (MRZJW3-MC2-UTL) to the \"Countermeasures for Products\" section as a updated product."
},
{
"date": "2025-05-15T06:00:00.000000Z",
"legacy_version": "Additional Release 7",
"number": "8",
"summary": "CISA Republication - Update C - Added version information for Position Board Utility2"
},
{
"date": "2025-08-28T00:00:00.000000Z",
"legacy_version": "Additional Release 8",
"number": "9",
"summary": "Added the updated products such as CW Configurator, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU), and MELSOFT EM Software Development Kit (SW1DND-EMSDK-B) to the \"Countermeasures for Products\" section."
},
{
"date": "2025-08-28T06:00:00.000000Z",
"legacy_version": "Additional Release 9",
"number": "10",
"summary": "CISA Republication - Update D - Added version information to affected product and mitigation sections."
},
{
"date": "2026-01-15T00:00:00.000000Z",
"legacy_version": "Additional Release 10",
"number": "11",
"summary": "Added ICONICS Suite and MT Works2 to the \"Affected Products\" section. And added the updated products such as GENESIS, Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224), PX Developer/Monitor Tool, RT VisualBox, C Controller Interface Module utility (SW1DNC-QSCCF-B), and MT Works2 to the \"Countermeasures for Products\" section."
},
{
"date": "2026-01-15T07:00:00.000000Z",
"legacy_version": "Additional Release 11",
"number": "12",
"summary": "CISA Republication - Update E - Added version information to affected product and mitigation sections."
},
{
"date": "2026-06-09T06:00:00.000000Z",
"legacy_version": "Latest Updated CISA Republication",
"number": "13",
"summary": "CISA Republication update based on Mitsubishi Electric 2024-001 advisory"
}
],
"status": "final",
"version": "13"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.154L",
"product": {
"name": "Mitsubishi Electric CPU Module Logging Configuration Tool: \u003c=1.154L",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "CPU Module Logging Configuration Tool"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.5",
"product": {
"name": "Mitsubishi Electric CSGL (GX Works2 connection configuration): \u003c=2.5",
"product_id": "CSAFPID-0002"
}
}
],
"category": "product_name",
"name": "CSGL (GX Works2 connection configuration)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.019V",
"product": {
"name": "Mitsubishi Electric CW Configurator: \u003c=1.019V",
"product_id": "CSAFPID-0003"
}
}
],
"category": "product_name",
"name": "CW Configurator"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=3.58L",
"product": {
"name": "Mitsubishi Electric Data Transfer: \u003c=3.58L",
"product_id": "CSAFPID-0004"
}
}
],
"category": "product_name",
"name": "Data Transfer"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.00A",
"product": {
"name": "Mitsubishi Electric Data Transfer Classic: \u003c=1.00A",
"product_id": "CSAFPID-0005"
}
}
],
"category": "product_name",
"name": "Data Transfer Classic"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=5.92",
"product": {
"name": "Mitsubishi Electric EZSocket: \u003c=5.92",
"product_id": "CSAFPID-0006"
}
}
],
"category": "product_name",
"name": "EZSocket"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric FR Configurator SW3: vers:all/*",
"product_id": "CSAFPID-0007"
}
}
],
"category": "product_name",
"name": "FR Configurator SW3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.32J",
"product": {
"name": "Mitsubishi Electric FR Configurator2: \u003c=1.32J",
"product_id": "CSAFPID-0008"
}
}
],
"category": "product_name",
"name": "FR Configurator2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=10.97.3",
"product": {
"name": "Mitsubishi Electric GENESIS64: \u003c=10.97.3",
"product_id": "CSAFPID-0009"
}
}
],
"category": "product_name",
"name": "GENESIS64"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.310Y",
"product": {
"name": "Mitsubishi Electric GT Designer3 Version1 (GOT1000): \u003c=1.310Y",
"product_id": "CSAFPID-0010"
}
}
],
"category": "product_name",
"name": "GT Designer3 Version1 (GOT1000)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.317F",
"product": {
"name": "Mitsubishi Electric GT Designer3 Version1 (GOT2000): \u003c=1.317F",
"product_id": "CSAFPID-0011"
}
}
],
"category": "product_name",
"name": "GT Designer3 Version1 (GOT2000)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=3.310Y",
"product": {
"name": "Mitsubishi Electric GT SoftGOT1000 Version3: \u003c=3.310Y",
"product_id": "CSAFPID-0012"
}
}
],
"category": "product_name",
"name": "GT SoftGOT1000 Version3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.315D",
"product": {
"name": "Mitsubishi Electric GT SoftGOT2000 Version1: \u003c=1.315D",
"product_id": "CSAFPID-0013"
}
}
],
"category": "product_name",
"name": "GT SoftGOT2000 Version1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric GX Developer: vers:all/*",
"product_id": "CSAFPID-0014"
}
}
],
"category": "product_name",
"name": "GX Developer"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.154L",
"product": {
"name": "Mitsubishi Electric GX LogViewer: \u003c=1.154L",
"product_id": "CSAFPID-0015"
}
}
],
"category": "product_name",
"name": "GX LogViewer"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.622Y",
"product": {
"name": "Mitsubishi Electric GX Works2: \u003c=1.622Y",
"product_id": "CSAFPID-0016"
}
}
],
"category": "product_name",
"name": "GX Works2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.106L",
"product": {
"name": "Mitsubishi Electric GX Works3: \u003c=1.106L",
"product_id": "CSAFPID-0017"
}
}
],
"category": "product_name",
"name": "GX Works3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.102G",
"product": {
"name": "Mitsubishi Electric iQ Works (MELSOFT Navigator): \u003c=2.102G",
"product_id": "CSAFPID-0018"
}
}
],
"category": "product_name",
"name": "iQ Works (MELSOFT Navigator)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric MI Configurator: vers:all/*",
"product_id": "CSAFPID-0019"
}
}
],
"category": "product_name",
"name": "MI Configurator"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=A8",
"product": {
"name": "Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): \u003c=A8",
"product_id": "CSAFPID-0020"
}
}
],
"category": "product_name",
"name": "Numerical Control Device Communication Software (FCSB1224)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric MR Configurator (SETUP221): vers:all/*",
"product_id": "CSAFPID-0021"
}
}
],
"category": "product_name",
"name": "MR Configurator (SETUP221)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.150G",
"product": {
"name": "Mitsubishi Electric MR Configurator2: \u003c=1.150G",
"product_id": "CSAFPID-0022"
}
}
],
"category": "product_name",
"name": "MR Configurator2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=3.40",
"product": {
"name": "Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL): \u003c=3.40",
"product_id": "CSAFPID-0023"
}
}
],
"category": "product_name",
"name": "Position Board Utility2 (MRZJW3-MC2-UTL)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=5.007H",
"product": {
"name": "Mitsubishi Electric MX Component: \u003c=5.007H",
"product_id": "CSAFPID-0024"
}
}
],
"category": "product_name",
"name": "MX Component"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64): vers:all/*",
"product_id": "CSAFPID-0025"
}
}
],
"category": "product_name",
"name": "MX OPC Server DA/UA (Software packaged with MC Works64)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.58L",
"product": {
"name": "Mitsubishi Electric PX Developer/Monitor Tool: \u003c=1.58L",
"product_id": "CSAFPID-0026"
}
}
],
"category": "product_name",
"name": "PX Developer/Monitor Tool"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.20W",
"product": {
"name": "Mitsubishi Electric RT ToolBox3: \u003c=2.20W",
"product_id": "CSAFPID-0027"
}
}
],
"category": "product_name",
"name": "RT ToolBox3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.11M",
"product": {
"name": "Mitsubishi Electric RT VisualBox: \u003c=1.11M",
"product_id": "CSAFPID-0028"
}
}
],
"category": "product_name",
"name": "RT VisualBox"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=4.14Q",
"product": {
"name": "Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): \u003c=4.14Q",
"product_id": "CSAFPID-0029"
}
}
],
"category": "product_name",
"name": "Setting/monitoring tools for the C Controller module (SW4PVC-CCPU)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=36N",
"product": {
"name": "Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): \u003c=36N",
"product_id": "CSAFPID-0030"
}
}
],
"category": "product_name",
"name": "MELSECNET/H Interface Board software package (SW0DNC-MNETH-B)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.25B",
"product": {
"name": "Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): \u003c=1.25B",
"product_id": "CSAFPID-0031"
}
}
],
"category": "product_name",
"name": "CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.18U",
"product": {
"name": "Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J): \u003c=1.18U",
"product_id": "CSAFPID-0032"
}
}
],
"category": "product_name",
"name": "CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.31H",
"product": {
"name": "Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): \u003c=1.31H",
"product_id": "CSAFPID-0033"
}
}
],
"category": "product_name",
"name": "CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=2.10",
"product": {
"name": "Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B): \u003c=2.10",
"product_id": "CSAFPID-0034"
}
}
],
"category": "product_name",
"name": "C Controller Interface Module utility (SW1DNC-QSCCF-B)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.020W",
"product": {
"name": "Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): \u003c=1.020W",
"product_id": "CSAFPID-0035"
}
}
],
"category": "product_name",
"name": "MELSOFT EM Software Development Kit (SW1DND-EMSDK-B)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.200J",
"product": {
"name": "Mitsubishi Electric MT Works2: \u003c=1.200J",
"product_id": "CSAFPID-0036"
}
}
],
"category": "product_name",
"name": "MT Works2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=10.97.3",
"product": {
"name": "Mitsubishi Electric ICONICS Suite: \u003c=10.97.3",
"product_id": "CSAFPID-0037"
}
}
],
"category": "product_name",
"name": "ICONICS Suite"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.18U",
"product": {
"name": "Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B): \u003c=1.18U",
"product_id": "CSAFPID-0038"
}
}
],
"category": "product_name",
"name": "CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B)"
}
],
"category": "vendor",
"name": "Mitsubishi Electric"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=10.97.3",
"product": {
"name": "Mitsubishi Electric Iconics Digital Solutions GENESIS64: \u003c=10.97.3",
"product_id": "CSAFPID-0039"
}
}
],
"category": "product_name",
"name": "GENESIS64"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=10.97.3",
"product": {
"name": "Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: \u003c=10.97.3",
"product_id": "CSAFPID-0040"
}
}
],
"category": "product_name",
"name": "ICONICS Suite"
}
],
"category": "vendor",
"name": "Mitsubishi Electric Iconics Digital Solutions"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-51776",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "summary",
"text": "A privilege escalation vulnerability due to improper privilege management caused by a vulnerability in Jungo\u0027s WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to escalate Windows system privileges and execute arbitrary commands. ",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:T/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51776"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/269.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
},
{
"cve": "CVE-2023-51777",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "A denial-of-service vulnerability due to uncontrolled resource consumption caused by a vulnerability in Jungo\u0027s WinDriver exists in the multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition.",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:P/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51777"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/400.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
},
{
"cve": "CVE-2023-51778",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A denial-of-service vulnerability due to an out-of-bounds write caused by a vulnerability in Jungo\u0027s WinDriver exists in the multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition.",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:P/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51778"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/787.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
},
{
"cve": "CVE-2024-22102",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "A denial-of-service vulnerability due to uncontrolled resource consumption caused by a vulnerability in Jungo\u0027s WinDriver exists in the multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition.",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:P/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22102"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/400.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
},
{
"cve": "CVE-2024-22103",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A denial-of-service vulnerability due to an out-of-bounds write caused by a vulnerability in Jungo\u0027s WinDriver exists in the multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition.",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:P/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22103"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/787.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
},
{
"cve": "CVE-2024-22104",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A denial-of-service vulnerability due to an out-of-bounds write caused by a vulnerability in Jungo\u0027s WinDriver exists in the multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition. ",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:P/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22104"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/787.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
},
{
"cve": "CVE-2024-22105",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "A denial-of-service vulnerability due to uncontrolled resource consumption caused by a vulnerability in Jungo\u0027s WinDriver exists in the multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition.",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:P/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22105"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/400.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
},
{
"cve": "CVE-2024-22106",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "summary",
"text": "A privilege escalation and denial-of-service vulnerability due to improper privilege management caused by a vulnerability in Jungo\u0027s WinDriver exists in the multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition and/or to escalate Windows system privileges and execute arbitrary commands.",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:T/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22106"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/269.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
},
{
"cve": "CVE-2024-25086",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "summary",
"text": "A privilege escalation vulnerability due to improper privilege management caused by a vulnerability in Jungo\u0027s WinDriver exists in the multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to escalate Windows system privileges and execute arbitrary commands. ",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:T/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25086"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/269.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
},
{
"cve": "CVE-2024-25087",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "A denial-of-service vulnerability due to uncontrolled resource consumption caused by a vulnerability in Jungo\u0027s WinDriver exists in the multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition.",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:P/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25087"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/400.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
},
{
"cve": "CVE-2024-25088",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "summary",
"text": "A privilege escalation vulnerability due to improper privilege management caused by a vulnerability in Jungo\u0027s WinDriver exists in the multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to escalate Windows system privileges and execute arbitrary commands.",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:T/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25088"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/269.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
},
{
"cve": "CVE-2024-26314",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "summary",
"text": "A privilege escalation vulnerability due to improper privilege management caused by a vulnerability in Jungo\u0027s WinDriver exists in the multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to escalate Windows system privileges and execute arbitrary commands. ",
"title": "Vulnerability Summary"
},
{
"category": "details",
"text": "SSVCv2/E:N/A:N/T:T/2026-04-07T00:00:00Z/",
"title": "SSVC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26314"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/269.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0011"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0012"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0013"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0016"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0017"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0018"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0020"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0022"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0023"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0024"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0026"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0027"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0028"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0029"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0031"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0033"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0034"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0035"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0036"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0037"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link \"https://www.mitsubishielectric.com/fa/download/index.html\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\".",
"product_ids": [
"CSAFPID-0038"
],
"url": "https://www.mitsubishielectric.com/fa/download/index.html"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to GENESIS64. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0039"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "vendor_fix",
"details": "Mitsubishi Electric Iconics Digital Solutions is releasing GENESIS version 11 or later which is a successor product to ICONICS Suite. Download the fixed version from the link \"https://iconicsinc.my.site.com/community/s/resource-center/product-downloads\" and install it. For more information on the fixed version, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities which can be found at \"https://iconics.com/about/security/cert\".",
"product_ids": [
"CSAFPID-0040"
],
"url": "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads"
},
{
"category": "no_fix_planned",
"details": "There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory \"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf\" and take the actions described there.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0014",
"CSAFPID-0019",
"CSAFPID-0021",
"CSAFPID-0025"
],
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf"
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
},
{
"category": "mitigation",
"details": "For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040"
]
}
]
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…