CVE-2024-8299— Mitsubishi Electric GENESIS64和Mitsubishi Electric MC Works64 代码问题漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2024-8299の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32
ソース: NVD (National Vulnerability Database)
脆弱性説明
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions Hyper Historian versions 10.97.3 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS32 all versions allows a local authenticated attacker to execute a malicious code by storing a specially crafted DLL in a specific folder. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or to cause a denial of service (DoS) condition on the products.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
对搜索路径元素未加控制
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Mitsubishi Electric GENESIS64和Mitsubishi Electric MC Works64 代码问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Mitsubishi Electric MC Works64和Mitsubishi Electric GENESIS64都是日本三菱电机（Mitsubishi Electric）公司的产品。Mitsubishi Electric MC Works64是一套数据采集与监控系统（SCADA）。Mitsubishi Electric GENESIS64是一个 SCADA 套件。 Mitsubishi Electric GENESIS64和Mitsubishi Electric MC Works64存在代码问题漏
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Mitsubishi Electric Corporation | GENESIS64 | all versions | - | |
| Mitsubishi Electric Corporation | MC Works64 | all versions | - | |
| Mitsubishi Electric Iconics Digital Solutions | GENESIS64 | all versions | - | |
| Mitsubishi Electric Corporation | ICONICS Suite | all versions | - | |
| Mitsubishi Electric Iconics Digital Solutions | ICONICS Suite | all versions | - | |
| Mitsubishi Electric Corporation | GENESIS32 | all versions | - | |
| Mitsubishi Electric Iconics Digital Solutions | GENESIS32 | all versions | - |
II. CVE-2024-8299の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2024-8299のインテリジェンス情報
请登录查看更多情报信息。
- ICONICS and Mitsubishi Electric Products | CISAgovernment-resource
- https://nvd.nist.gov/vuln/detail/CVE-2024-8299
Same Patch Batch · Mitsubishi Electric Corporation · 2024-11-28 · 3 CVEs total
| CVE-2024-9852 | 7.8 HIGH | Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Wo |
| CVE-2024-8300 | 7.0 HIGH | Malicious Code Execution Vulnerability in GENESIS64 and ICONICS Suite |
IV. 関連脆弱性
同じ製品: GENESIS64
- CVE-2025-14816
Information Disclosure, Tampering, and Denial-of-Service Vul - CVE-2025-14815
Information Disclosure, Tampering, and Denial-of-Service Vul - CVE-2025-11774
Malicious Code Execution Vulnerability in the Software Keybo - CVE-2025-7376
Information Tampering Vulnerability in Multiple Processes of - CVE-2025-0921
Information Tampering Vulnerability in Multiple Services of
同じベンダー: Mitsubishi Electric Corporation
- CVE-2025-14816
Information Disclosure, Tampering, and Denial-of-Service Vul - CVE-2025-14815
Information Disclosure, Tampering, and Denial-of-Service Vul - CVE-2025-2399
Denial of Service (DoS) Vulnerability in Mitsubishi Electric - CVE-2026-1876
Denial-of-Service (DoS) vulnerability in Ethernet function o - CVE-2026-1875
Denial-of-Service (DoS) vulnerability in Ethernet function o
同じ弱点: CWE-427
- CVE-2026-44406
DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartvie - CVE-2026-40004
openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud - CVE-2026-21661
AC2000 Uncontrolled Search Path Element - CVE-2026-6788
Uncontrolled search path in PluginLauncher allows SYSTEM cod - CVE-2026-25852
Acronis DeviceLock DLP 代码问题漏洞
V. CVE-2024-8299へのコメント
まだコメントはありません