Uncontrolled Search Path Element Vulnerability in ICONICS GENESIS64

CVE-2024-9852

What is CVE-2024-9852?

The uncontrolled search path element vulnerability in the ICONICS GENESIS64 and Mitsubishi Electric product lines allows a local authenticated attacker to exploit the system by placing a specially crafted DLL into a designated folder. This exploitation can lead to unauthorized execution of malicious code, potentially allowing the attacker to disclose sensitive information, tamper with data, or disrupt operations, resulting in denial of service (DoS) conditions. Organizations utilizing these products should take immediate steps to assess their security posture and mitigate the risks associated with this vulnerability.

References