CVE-2024-9852

CVSS V2 None CVSS V3 None

Description

Uncontrolled Search Path Element vulnerability in ICONICS GENESIS64 all versions, Mitsubishi Electric GENESIS64 all versions and Mitsubishi Electric MC Works64 all versions allows a local authenticated attacker to execute a malicious code by storing a specially crafted DLL in a specific folder. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or cause a denial of service (DoS) condition on the products.

Overview

CVE ID
CVE-2024-9852

Assigner
Mitsubishi

Vulnerability Status
PUBLISHED

Published Version
2024-11-28T22:20:28.303Z

Last Modified Date
2024-11-28T22:20:28.303Z

Weakness Enumerations

CWE	URL
CWE-427	http://cwe.mitre.org/data/definitions/427.html

References

Reference URL	Reference Tags
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-010_en.pdf	vendor-advisory
https://jvn.jp/vu/JVNVU93891820	government-resource

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-9852
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9852

History

Created	Old Value	New Value	Data Type	Notes
2024-11-29 13:21:43				Added to TrackCVE