Skip to main content

Genesis64 CVE-2024-22102

MEDIUM
Uncontrolled Resource Consumption (CWE-400)
2024-07-02 cve@mitre.org
Denial Of Service Microsoft Genesis64 Windriver Cpu Module Logging Configuration Tool Cw Configurator Gx Logviewer Gx Works2 Gx Works3 Mi Configurator Mr Configurator2 Rt Toolbox3 Data Transfer Ezsocket Fr Configurator Sw3 Fr Configurator2 Gt Softgot1000 Gt Softgot2000 Gx Developer Mx Component Data Transfer Classic Gt Got1000 Gt Got2000 Iq Works Mr Configurator Mx Opc Server Da Ua Numerical Control Device Communication Px Developer Monitor Tool Rt Visualbox Mrzjw3 Mc2 Utl Firmware Sw0Dnc Mneth B Firmware Sw1Dnc Ccbd2 B Firmware Sw1Dnc Ccief J Firmware Sw1Dnc Ccief B Firmware Sw1Dnc Mnetg B Firmware Sw1Dnc Qsccf B Firmware Sw1Dnd Emsdk B Firmware Mitsubishielectric Jungo
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Jul 02, 2024 - 15:15 nvd
MEDIUM 5.5

DescriptionNVD

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error.

AnalysisAI

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Uncontrolled Resource Consumption (CWE-400), which allows attackers to cause denial of service by exhausting system resources. Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error. Affected products include: Jungo Windriver, Mitsubishielectric Cpu Module Logging Configuration Tool, Mitsubishielectric Cw Configurator, Mitsubishielectric Data Transfer, Mitsubishielectric Data Transfer Classic. Version information: before 12.6.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement rate limiting, set resource quotas, validate input sizes, use timeouts.

More in Genesis64

View all
CVE-2025-14816 CRITICAL
9.3 Apr 08

SQL Server credentials are displayed in cleartext within the Hyper Historian Splitter GUI across multiple Mitsubishi Ele
CVE-2025-14815 CRITICAL
9.3 Apr 08

Plaintext SQL Server credential storage in Mitsubishi Electric SCADA/HMI products allows local authenticated attackers w
CVE-2022-33318 CRITICAL
9.8 Jul 20

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi E
CVE-2020-12007 CRITICAL
9.8 Jul 16

A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-
CVE-2020-12011 CRITICAL
9.8 Jul 16

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow
CVE-2022-33319 CRITICAL
9.1 Jul 20

Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics
CVE-2020-12013 CRITICAL
9.1 Jul 16

A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely
CVE-2024-7587 HIGH
7.8 Oct 22

Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric

CVE-2024-26314 HIGH
7.8 Jul 02

Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and

CVE-2024-25088 HIGH
7.8 Jul 02

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute
CVE-2024-25086 HIGH
7.8 Jul 02

Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute
CVE-2024-22106 HIGH
7.8 Jul 02

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute ar

Same weakness CWE-400 – Uncontrolled Resource Consumption

View all
CVE-2023-44487 HIGH POC
7.5
CVE-2026-45498 HIGH POC
7.5
CVE-2016-8610 HIGH
7.5
CVE-2026-28318 HIGH POC
7.5
CVE-2023-38180 HIGH
7.5
CVE-2025-26673 HIGH
7.5
CVE-2015-7978 HIGH
7.5
CVE-2025-27473 HIGH
7.5

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2024-22102 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy