CVE-2024-9852
Malicious Code Execution Vulnerability in GENESIS64 and MC Works64
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Malicious Code Execution Vulnerability in GENESIS64 and MC Works64
Uncontrolled Search Path Element vulnerability in ICONICS GENESIS64 all versions, Mitsubishi Electric GENESIS64 all versions and Mitsubishi Electric MC Works64 all versions allows a local authenticated attacker to execute a malicious code by storing a specially crafted DLL in a specific folder. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or cause a denial of service (DoS) condition on the products.
Reserved 2024-10-11 | Published 2024-11-28 | Updated 2024-12-06 | Assigner MitsubishiCWE-427 Uncontrolled Search Path Element
Asher Davila of Palo Alto Networks
Malav Vyas of Palo Alto Networks
www.mitsubishielectric.com/...nerability/pdf/2024-010_en.pdf
jvn.jp/vu/JVNVU93891820
www.cisa.gov/news-events/ics-advisories/icsa-24-338-04
Support options
