Skip to content
Fencer Vulns
high 7.8

CVE-2024-26314 json

Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary c…

published 2024-07-02 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-23584

cvss
7.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 13%
public exploits
0
none known

Summary

Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code.

Patch / fix

  • jungo windriver 16.2.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-135-04 updated cvss 4.4

Mitsubishi Electric Multiple FA Engineering Software Products (Update G)

  • Mitsubishi Electric C Controller Interface Module utility (SW1DNC-QSCCF-B) <=2.10
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B) <=1.31H Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B) <=1.18U Mitsubishi Electric CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J) <=1.18U Mitsubishi Electric CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B) <=1.25B Mitsubishi Electric CPU Module Logging Configuration Tool <=1.154L
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric CSGL (GX Works2 connection configuration) <=2.5
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric CW Configurator <=1.019V Mitsubishi Electric Data Transfer <=3.58L Mitsubishi Electric Data Transfer Classic <=1.00A
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric EZSocket <=5.92
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric FR Configurator SW3
    affected: mitigation, no fix planned mitsubishielectric.com
  • Mitsubishi Electric FR Configurator2 <=1.32J
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric GENESIS64 >=10.97.1, <=10.97.3
    affected: vendor fix, mitigation iconicsinc.my.site.com
show 11 more
  • Mitsubishi Electric GT Designer3 Version1 (GOT1000) <=1.310Y Mitsubishi Electric GT Designer3 Version1 (GOT2000) <=1.317F Mitsubishi Electric GT SoftGOT1000 Version3 <=3.310Y Mitsubishi Electric GT SoftGOT2000 Version1 <=1.315D
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric GX Developer
    affected: mitigation, no fix planned mitsubishielectric.com
  • Mitsubishi Electric GX LogViewer <=1.154L Mitsubishi Electric GX Works2 <=1.622Y Mitsubishi Electric GX Works3 <=1.106L
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric Iconics Digital Solutions GENESIS64 >=10.97.1, <=10.97.3 Mitsubishi Electric Iconics Digital Solutions ICONICS Suite >=10.97.1, <=10.97.3 Mitsubishi Electric ICONICS Suite >=10.97.1, <=10.97.3
    affected: vendor fix, mitigation iconicsinc.my.site.com
  • Mitsubishi Electric iQ Works (MELSOFT Navigator) <=2.102G Mitsubishi Electric MELSECNET/H Interface Board software package (SW0DNC-MNETH-B) <=36N Mitsubishi Electric MELSOFT EM Software Development Kit (SW1DND-EMSDK-B) <=1.020W
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric MI Configurator Mitsubishi Electric MR Configurator (SETUP221)
    affected: mitigation, no fix planned mitsubishielectric.com
  • Mitsubishi Electric MR Configurator2 <=1.150G Mitsubishi Electric MT Works2 <=1.200J Mitsubishi Electric MX Component <=5.007H
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric MX OPC Server DA/UA (Software packaged with MC Works64)
    affected: mitigation, no fix planned mitsubishielectric.com
  • Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224) <=A8
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric Position Board Utility2 (MRZJW3-MC2-UTL) <=3.40
    affected: vendor fix, mitigation mitsubishielectric.com
  • Mitsubishi Electric PX Developer/Monitor Tool <=1.58L Mitsubishi Electric RT ToolBox3 <=2.20W Mitsubishi Electric RT VisualBox <=1.11M Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) <=4.14Q
    affected: vendor fix, mitigation mitsubishielectric.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.23% chance of exploitation in the next 30 days, higher than 13% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • mitsubishielectric cpu_module_logging_configuration_tool
  • mitsubishielectric gx_works2
  • mitsubishielectric cw_configurator
  • mitsubishielectric data_transfer
  • mitsubishielectric ezsocket
  • mitsubishielectric fr_configurator_sw3
  • mitsubishielectric fr_configurator2
  • iconics genesis64
  • mitsubishielectric gt_designer3
  • mitsubishielectric gt_softgot1000
  • mitsubishielectric gt_softgot2000
  • mitsubishielectric gx_developer
  • mitsubishielectric gx_logviewer
  • mitsubishielectric gx_works3
  • mitsubishielectric melsoft_navigator
  • mitsubishielectric mi_configurator
  • mitsubishielectric fcsb1224
  • mitsubishielectric mr_configurator2
  • mitsubishielectric mrzjw3-mc2-utl
  • mitsubishielectric mx_component
  • mitsubishielectric mx_opc_server_da\/ua
  • mitsubishielectric px_developer
  • mitsubishielectric rt_toolbox3
  • mitsubishielectric rt_visualbox
  • mitsubishielectric c_controller_module_setting_and_monitoring_tool
  • mitsubishielectric sw0dnc-mneth-b
  • mitsubishielectric sw1dnc-ccbd2-b
  • mitsubishielectric sw1dnc-ccief-j
  • mitsubishielectric sw1dnc-ccief-b
  • mitsubishielectric sw1dnc-mnetg-b
  • mitsubishielectric sw1dnc-qsccf-b
  • mitsubishielectric sw1dnd-emsdk-b

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.