TI-2024-14711 Aliases CVE-2024-22104 GHSA-x4p5-hg55-839v

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers…

LOW 24CWE-400Published 2024-07-02 · Updated 2024-08-01

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-400.

Summary

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00234 14th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 43

CPE	Versions	Role	Vendor
cpe:2.3:a:jungo:windriver::::::::	before 12.5.1	Vulnerable	Jungo
cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:cw_configurator::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:data_transfer::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:data_transfer_classic::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:ezsocket::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:fr_configurator_sw3::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:fr_configurator2::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:genesis64::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gt_got1000::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.

cpe:2.3:a:jungo:windriver:*:*:*:*:*:*:*:* Versions before 12.5.1 Vulnerable ·Jungo
cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:data_transfer_classic:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:genesis64:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gt_got1000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.

Show 33 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:mitsubishielectric:gt_got2000::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gt_softgot1000::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gt_softgot2000::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gx_developer::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gx_logviewer::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gx_works2::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gx_works3::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:iq_works::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:mi_configurator::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:mr_configurator::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:mr_configurator2::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:mx_component::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:mx_opc_server_da\/ua::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:numerical_control_device_communication::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:px_developer\/monitor_tool::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:rt_toolbox3::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:rt_visualbox::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:mrzjw3-mc2-utl_firmware::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:mrzjw3-mc2-utl:-:::::::*	not specified by NVD	Running on	Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw0dnc-mneth-b_firmware::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw0dnc-mneth-b:-:::::::*	not specified by NVD	Running on	Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnc-ccbd2-b_firmware::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnc-ccbd2-b:-:::::::*	not specified by NVD	Running on	Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-j_firmware::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnc-ccief-j:-:::::::*	not specified by NVD	Running on	Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-b_firmware::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnc-ccief-b:-:::::::*	not specified by NVD	Running on	Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnc-mnetg-b_firmware::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnc-mnetg-b:-:::::::*	not specified by NVD	Running on	Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnc-qsccf-b_firmware::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnc-qsccf-b:-:::::::*	not specified by NVD	Running on	Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnd-emsdk-b_firmware::::::::	all versions	Vulnerable	Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnd-emsdk-b:-:::::::*	not specified by NVD	Running on	Mitsubishi Electric Europe B.V.

cpe:2.3:a:mitsubishielectric:gt_got2000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gx_developer:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:iq_works:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:mr_configurator:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:mx_opc_server_da\/ua:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:numerical_control_device_communication:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:px_developer\/monitor_tool:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:a:mitsubishielectric:rt_visualbox:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:mrzjw3-mc2-utl_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:mrzjw3-mc2-utl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw0dnc-mneth-b_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw0dnc-mneth-b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnc-ccbd2-b_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnc-ccbd2-b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-j_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnc-ccief-j:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-b_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnc-ccief-b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnc-mnetg-b_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnc-mnetg-b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnc-qsccf-b_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnc-qsccf-b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:sw1dnd-emsdk-b_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:sw1dnd-emsdk-b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2024-22104
2026-10-03 Alias added: GHSA-x4p5-hg55-839v

References

Advisory 2

Other 1

https://jungo.com/windriver/versions/

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences