CVE-2024-25086
HIGHDescription
Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code.
Is your site exposed to CVE-2024-25086?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| jungo | windriver |
| mitsubishielectric | cpu_module_logging_configuration_tool |
| mitsubishielectric | cw_configurator |
| mitsubishielectric | data_transfer |
| mitsubishielectric | data_transfer_classic |
| mitsubishielectric | ezsocket |
| mitsubishielectric | fr_configurator_sw3 |
| mitsubishielectric | fr_configurator2 |
| mitsubishielectric | genesis64 |
| mitsubishielectric | gt_got1000 |
| mitsubishielectric | gt_got2000 |
| mitsubishielectric | gt_softgot1000 |
| mitsubishielectric | gt_softgot2000 |
| mitsubishielectric | gx_developer |
| mitsubishielectric | gx_logviewer |
| mitsubishielectric | gx_works2 |
| mitsubishielectric | gx_works3 |
| mitsubishielectric | iq_works |
| mitsubishielectric | mi_configurator |
| mitsubishielectric | mr_configurator |
| mitsubishielectric | mr_configurator2 |
| mitsubishielectric | mx_component |
| mitsubishielectric | mx_opc_server_da\/ua |
| mitsubishielectric | numerical_control_device_communication |
| mitsubishielectric | px_developer\/monitor_tool |
| mitsubishielectric | rt_toolbox3 |
| mitsubishielectric | rt_visualbox |
| mitsubishielectric | mrzjw3-mc2-utl_firmware |
| mitsubishielectric | mrzjw3-mc2-utl |
| mitsubishielectric | sw0dnc-mneth-b_firmware |
| mitsubishielectric | sw0dnc-mneth-b |
| mitsubishielectric | sw1dnc-ccbd2-b_firmware |
| mitsubishielectric | sw1dnc-ccbd2-b |
| mitsubishielectric | sw1dnc-ccief-j_firmware |
| mitsubishielectric | sw1dnc-ccief-j |
| mitsubishielectric | sw1dnc-ccief-b_firmware |
| mitsubishielectric | sw1dnc-ccief-b |
| mitsubishielectric | sw1dnc-mnetg-b_firmware |
| mitsubishielectric | sw1dnc-mnetg-b |
| mitsubishielectric | sw1dnc-qsccf-b_firmware |
| mitsubishielectric | sw1dnc-qsccf-b |
| mitsubishielectric | sw1dnd-emsdk-b_firmware |
| mitsubishielectric | sw1dnd-emsdk-b |
References
Other References
Frequently Asked Questions
What is CVE-2024-25086? +
How severe is CVE-2024-25086? +
What products are affected by CVE-2024-25086? +
How do I check if I'm vulnerable to CVE-2024-25086? +
Related Vulnerabilities
Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.217 , Tabby enables several high-risk Electron Fuses, including …
A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default …
MaaAssistantArknights is a one-click tool for daily Arknights tasks. In the current dev-v2 workflow, .github/workflows/release-preparation.yml inlined attacker-controlled github.event.pull_request.title into a …
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.4, Kiota's PHP generator embedded OpenAPI description, default fields, …
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, `kiota info` read x-ms-kiota-info.languagesInformation.<language>.dependencyInstallCommand plus dependency name and …
Actual is an open-source personal finance application. In the macOS desktop application version 25.x (built on Electron 39.2.7), the ELECTRON_RUN_AS_NODE …