Jungo WinDriver Privilege Escalation Vulnerability
CVE-2024-22106

7.8HIGH

Key Information:

Vendor

Jungo

Status
Windriver
Vendor
CVE Published:
2 July 2024

What is CVE-2024-22106?

The vulnerability pertains to improper privilege management present in Jungo's WinDriver software versions prior to 12.5.1. This flaw allows local attackers to escalate their privileges, enabling them to execute arbitrary code on affected systems or instigate a Denial of Service (DoS). Exploiting this vulnerability could lead to significant security breaches and operational disruptions. Organizations using the affected versions are advised to assess their systems and apply the necessary updates to mitigate the risk associated with this vulnerability.

References

https://jungo.com/windriver/versions/
https://www.mitsubishielectric.com/en/psirt/vulnerability...
https://www.cisa.gov/news-events/ics-advisories/icsa-24-1...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-22106 : Jungo WinDriver Privilege Escalation Vulnerability