Uncontrolled Search Path Element vulnerability in ICONICS GENESIS64 all versions, Mitsubishi Electric GENESIS64 all versions and Mitsubishi Electric MC Works64 all versions allows a local authenticated attacker to execute a malicious code by storing a specially crafted DLL in a specific folder. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or cause a denial of service (DoS) condition on the products.
Metrics
Affected Vendors & Products
References
History
Fri, 06 Dec 2024 05:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|
Fri, 29 Nov 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Iconics
Iconics genesis64 Mitsubishielectric Mitsubishielectric mc Works64 |
|
CPEs | cpe:2.3:a:iconics:genesis64:-:*:*:*:*:*:*:* cpe:2.3:a:mitsubishielectric:mc_works64:-:*:*:*:*:*:*:* |
|
Vendors & Products |
Iconics
Iconics genesis64 Mitsubishielectric Mitsubishielectric mc Works64 |
|
Metrics |
ssvc
|
Thu, 28 Nov 2024 22:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Uncontrolled Search Path Element vulnerability in ICONICS GENESIS64 all versions, Mitsubishi Electric GENESIS64 all versions and Mitsubishi Electric MC Works64 all versions allows a local authenticated attacker to execute a malicious code by storing a specially crafted DLL in a specific folder. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or cause a denial of service (DoS) condition on the products. | |
Title | Malicious Code Execution Vulnerability in GENESIS64 and MC Works64 | |
Weaknesses | CWE-427 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: Mitsubishi
Published: 2024-11-28T22:16:31.396Z
Updated: 2024-12-06T05:18:03.652Z
Reserved: 2024-08-29T06:26:34.979Z
Link: CVE-2024-8299
Vulnrichment
Updated: 2024-11-29T16:40:36.798Z
NVD
Status : Awaiting Analysis
Published: 2024-11-28T23:15:03.843
Modified: 2024-12-06T06:15:22.917
Link: CVE-2024-8299
Redhat
No data.