Skip to content
Fencer Vulns
medium 5.5

CVE-2024-22104 json

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial o…

published 2024-07-02 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-19700

cvss
5.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 14%
public exploits
0
none known

Summary

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).

Patch / fix

  • jungo windriver 12.5.1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-135-04 updated cvss 4.4

Mitsubishi Electric Multiple FA Engineering Software Products (Update G)

  • Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B) <=2.10
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B) <=1.31H Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B) <=1.18U Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J) <=1.18U Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B) <=1.25B Mitsubishi Electric CPU Module Logging Configuration Tool <=1.154L
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric CSGL (GX Works2 connection configuration) <=2.5
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric CW Configurator <=1.019V Mitsubishi Electric Data Transfer <=3.58L Mitsubishi Electric Data Transfer Classic <=1.00A
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric EZSocket <=5.92
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric FR Configurator SW3
    affected: mitigation, no fix planned mitsubishielectric.com
  • Mitsubishi Electric FR Configurator2 <=1.32J
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric GENESIS64 >=10.97.1, <=10.97.3
    affected: vendor fix, mitigation iconicsinc.my.site.com
show 11 more
  • Mitsubishi Electric GT Designer3 Version1 (GOT1000) <=1.310Y Mitsubishi Electric GT Designer3 Version1 (GOT2000) <=1.317F Mitsubishi Electric GT SoftGOT1000 Version3 <=3.310Y Mitsubishi Electric GT SoftGOT2000 Version1 <=1.315D
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric GX Developer
    affected: mitigation, no fix planned mitsubishielectric.com
  • Mitsubishi Electric GX LogViewer <=1.154L Mitsubishi Electric GX Works2 <=1.622Y Mitsubishi Electric GX Works3 <=1.106L
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric Iconics Digital Solutions GENESIS64 >=10.97.1, <=10.97.3 Mitsubishi Electric Iconics Digital Solutions ICONICS Suite >=10.97.1, <=10.97.3 Mitsubishi Electric ICONICS Suite >=10.97.1, <=10.97.3
    affected: vendor fix, mitigation iconicsinc.my.site.com
  • Mitsubishi Electric iQ Works (MELSOFT Navigator) <=2.102G Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B) <=36N Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B) <=1.020W
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric MI Configurator Mitsubishi Electric MR Configurator (SETUP221)
    affected: mitigation, no fix planned mitsubishielectric.com
  • Mitsubishi Electric MR Configurator2 <=1.150G Mitsubishi Electric MT Works2 <=1.200J Mitsubishi Electric MX Component <=5.007H
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64)
    affected: mitigation, no fix planned mitsubishielectric.com
  • Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224) <=A8
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL) <=3.40
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric PX Developer/Monitor Tool <=1.58L Mitsubishi Electric RT ToolBox3 <=2.20W Mitsubishi Electric RT VisualBox <=1.11M Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) <=4.14Q
    affected: vendor fix, mitigation mitsubishielectric.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.23% chance of exploitation in the next 30 days, higher than 14% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

  • jungo windriver

Classification

Weakness
  • CWE-400 Uncontrolled Resource Consumption
  • CWE-787 Out-of-bounds Write

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.