Republished vendor advisory. This ICSA is a verbatim republication of Mitsubishi Electric 2024-001 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does…
Credit: Jongseong Kim, Byunghyun Kang, Sangjun Park, Yunjin Park, Kwon Yul, Seungchan Kim (today-0day, BoB 12th)
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2024-22106 | CWE-269 Improper Privilege Management | 6.0 Medium |
A privilege escalation and denial-of-service vulnerability due to improper privilege management caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition and/or to escalate Windows system privileges and execute arbitrary commands. CISA SSVC — Exploitation: None · Automatable: No · Impact: Total Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
| CVE-2023-51776 | CWE-269 Improper Privilege Management | 4.4 Medium |
A privilege escalation vulnerability due to improper privilege management caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to escalate Windows system privileges and execute arbitrary commands. CISA SSVC — Exploitation: None · Automatable: No · Impact: Total Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
| CVE-2023-51777 | CWE-400 Uncontrolled Resource Consumption | 4.4 Medium |
A denial-of-service vulnerability due to uncontrolled resource consumption caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition. CISA SSVC — Exploitation: None · Automatable: No · Impact: Partial Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
| CVE-2023-51778 | CWE-787 Out-of-bounds Write | 4.4 Medium |
A denial-of-service vulnerability due to an out-of-bounds write caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition. CISA SSVC — Exploitation: None · Automatable: No · Impact: Partial Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
| CVE-2024-22102 | CWE-400 Uncontrolled Resource Consumption | 4.4 Medium |
A denial-of-service vulnerability due to uncontrolled resource consumption caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition. CISA SSVC — Exploitation: None · Automatable: No · Impact: Partial Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
| CVE-2024-22103 | CWE-787 Out-of-bounds Write | 4.4 Medium |
A denial-of-service vulnerability due to an out-of-bounds write caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition. CISA SSVC — Exploitation: None · Automatable: No · Impact: Partial Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
| CVE-2024-22104 | CWE-787 Out-of-bounds Write | 4.4 Medium |
A denial-of-service vulnerability due to an out-of-bounds write caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition. CISA SSVC — Exploitation: None · Automatable: No · Impact: Partial Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
| CVE-2024-22105 | CWE-400 Uncontrolled Resource Consumption | 4.4 Medium |
A denial-of-service vulnerability due to uncontrolled resource consumption caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition. CISA SSVC — Exploitation: None · Automatable: No · Impact: Partial Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
| CVE-2024-25086 | CWE-269 Improper Privilege Management | 4.4 Medium |
A privilege escalation vulnerability due to improper privilege management caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to escalate Windows system privileges and execute arbitrary commands. CISA SSVC — Exploitation: None · Automatable: No · Impact: Total Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
| CVE-2024-25087 | CWE-400 Uncontrolled Resource Consumption | 4.4 Medium |
A denial-of-service vulnerability due to uncontrolled resource consumption caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition. CISA SSVC — Exploitation: None · Automatable: No · Impact: Partial Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
| CVE-2024-25088 | CWE-269 Improper Privilege Management | 4.4 Medium |
A privilege escalation vulnerability due to improper privilege management caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to escalate Windows system privileges and execute arbitrary commands. CISA SSVC — Exploitation: None · Automatable: No · Impact: Total Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
| CVE-2024-26314 | CWE-269 Improper Privilege Management | 4.4 Medium |
A privilege escalation vulnerability due to improper privilege management caused by a vulnerability in Jungo's WinDriver exists in multiple FA engineering software products. If a malicious code is executed on a computer where the affected software product is installed, this vulnerability may allow a local attacker to escalate Windows system privileges and execute arbitrary commands. CISA SSVC — Exploitation: None · Automatable: No · Impact: Total Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for CPU Module Logging Configuration Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed ve… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 2.6 or later for CSGL (GX Works2 connection configuration). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fi… ↗ Vendor fix: Mitsubishi Electric is releasing fixed version 1.020W or later for CW Configurator. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mi… ↗ Affected, fixed & timelineAffected:
Vendor fix: Mitsubishi Electric is releasing fixed version 3.59M or later for Data Transfer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.01B or later for Data Transfer Classic. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 5.A or later for EZSocket. Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.33K or later for FR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For more info… Vendor fix: Mitsubishi Electric is releasing fixed version 1.315D or later for GT Designer3 Version1 (GOT1000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT Designer3 Version1 (GOT2000). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.315D or later for GT SoftGOT1000 Version3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.320J or later for GT SoftGOT2000 Version1. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.160S or later for GX LogViewer. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.625B or later for GX Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.110Q or later for GX Works3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.106L or later for iQ Works (MELSOFT Navigator). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version A9 or later for Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/… Vendor fix: Mitsubishi Electric is releasing fixed version 1.155M or later for MR Configurator2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 3.50 or later for Position Board Utility2 (MRZJW3-MC2-UTL). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.p… Vendor fix: Mitsubishi Electric is releasing fixed version 5.008J or later for MX Component. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.59M or later for PX Developer/Monitor Tool. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 2.50C or later for RT ToolBox3. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 1.12N or later for RT VisualBox. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 4.15R or later for Setting/monitoring tools for the C Controller module (SW4PVC-CCPU). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerabi… Vendor fix: Mitsubishi Electric is releasing fixed version 37P or later for MELSECNET/H Interface Board software package (SW0DNC-MNETH-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pd… Vendor fix: Mitsubishi Electric is releasing fixed version 1.26C or later for CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psir… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric is releasing fixed version 1.32J or later for CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/ps… Vendor fix: Mitsubishi Electric is releasing fixed version 2.20 or later for C Controller Interface Module utility (SW1DNC-QSCCF-B). Mitsubishi Electric does not provide downloadable updates for the product. Contact your place of purchase for assistance. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf… Vendor fix: Mitsubishi Electric is releasing fixed version 1.025B or later for MELSOFT EM Software Development Kit (SW1DND-EMSDK-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024… Vendor fix: Mitsubishi Electric is releasing fixed version 1.205P or later for MT Works2. Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf". Vendor fix: Mitsubishi Electric is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to this vulnerability. For m… Vendor fix: Mitsubishi Electric is releasing fixed version 1.19V or later for CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B). Download the fixed version from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/v… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for GENESIS64, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of GENESIS64 consider replacing it with the successor product GENESIS which is not vulnerable to this vu… Vendor fix: Mitsubishi Electric Iconics Digital Solutions is releasing fixed version 10.98 or later for ICONICS Suite, download the fixed version from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads" and install it. As an alternative, Mitsubishi Electric recommends users of ICONICS Suite consider replacing it with the successor product GENESIS which is not vulnerable to… No fix planned: There are no plans to release fixed version for FR Configurator SW3, GX Developer, MI Configurator, MR Configurator (SETUP221), and MX OPC Server DA/UA (Software packaged with MC Works64). For users of these products, refer to the Mitsubishi Electric security advisory "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-001_en.pdf" and take the actions described there. Mitigation: For users who need to continue using an affected version of GENESIS64 or ICONICS Suite and do not require communication with Mitsubishi Electric devices, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend not installing the Mitsubishi Electric FA Connector component during software installation, to avoid the risk of exploitation of this vulnerability. For existing sys… Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend restricting physical access to the PC with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend installing antivirus software in your computer with the affected product installed, to minimize the risk of exploiting this vulnerability. Mitigation: For users of products that do not have a fixed version or who cannot immediately update the product, Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions recommend preventing the user from clicking on web links in emails from untrusted sources, or from opening attachments in untrusted emails, to minimize the risk of exploiting this vulnerability. |
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2024-22106 | 8.8 High | n/a n/a Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Deni… |
| CVE-2023-51776 | 7.8 High | n/a n/a Improper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate privileges and execute arbitrary code. |
| CVE-2024-25086 | 7.8 High | n/a n/a Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code. |
| CVE-2024-25088 | 7.8 High | n/a n/a Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code. |
| CVE-2024-26314 | 7.8 High | n/a n/a Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code. |
| CVE-2023-51777 | 5.5 Medium | n/a n/a Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error. |
| CVE-2023-51778 | 5.5 Medium | n/a n/a Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error and Denial of Service … |
| CVE-2024-22102 | 5.5 Medium | n/a n/a Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error. |
| CVE-2024-22104 | 5.5 Medium | n/a n/a Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service … |
| CVE-2024-22105 | 5.5 Medium | n/a n/a Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error. |
| CVE-2024-25087 | 5.5 Medium | n/a n/a Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error. |
| CVE-2024-22103 | 4.4 Medium | n/a n/a Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error and Denial of Service … |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.