CVE-2024-25088

moderate-risk

Published 2024-07-02

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code.

Do I need to act?

0.07% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Windriver

Cpu Module Logging Configuration Tool

Cw Configurator

Data Transfer

Data Transfer Classic

Ezsocket

Fr Configurator Sw3

Fr Configurator2

Genesis64

Gt Got1000

Gt Got2000

Gt Softgot1000

Gt Softgot2000

Gx Developer

Gx Logviewer

Gx Works2

Gx Works3

Iq Works

Mi Configurator

Mr Configurator

Mitsubishielectric Jungo

Release Notes https://jungo.com/windriver/versions/

Third Party Advisory https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04

Third Party Advisory https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf

Release Notes https://jungo.com/windriver/versions/

Third Party Advisory https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04

Third Party Advisory https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf

/ 100

moderate-risk

Severity 24/34 · High

Exploitability 0/34 · Minimal

Exposure 23/34 · High