CVE-2024-25086: Jungo Windriver

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code.

Affected products

• Jungo Windriver: before 12.2.0 (fixed in 12.2.0)
• Mitsubishielectric CPU Module Logging Configuration Tool: any version
• Mitsubishielectric Cw Configurator: any version
• Mitsubishielectric Data Transfer: any version
• Mitsubishielectric Data Transfer Classic: any version
• Mitsubishielectric Ezsocket: any version
• Mitsubishielectric Fr CONFIGURATOR2: any version
• Mitsubishielectric Fr Configurator SW3: any version
• Mitsubishielectric GENESIS64: any version
• Mitsubishielectric Gt GOT1000: any version
• Mitsubishielectric Gt GOT2000: any version
• Mitsubishielectric Gt SOFTGOT1000: any version
• Mitsubishielectric Gt SOFTGOT2000: any version
• Mitsubishielectric Gx Developer: any version
• Mitsubishielectric Gx Logviewer: any version
• Mitsubishielectric Gx WORKS2: any version
• Mitsubishielectric Gx WORKS3: any version
• Mitsubishielectric Iq Works: any version
• Mitsubishielectric Mi Configurator: any version
• Mitsubishielectric Mr Configurator: any version
• Mitsubishielectric Mr CONFIGURATOR2: any version
• Mitsubishielectric MRZJW3-MC2-Utl Firmware: any version
• Mitsubishielectric Mx Component: any version
• Mitsubishielectric Mx Opc Server Da/ua: any version
• Mitsubishielectric Numerical Control Device Communication: any version
• and 10 more

Published 2024-07-02. Last modified 2026-06-17.