QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-1182

Back to search

CVE-2024-1182

Published: Jul 4, 2024

Modified: Apr 8, 2026

PUBLISHED

CVSS v3.1

7.0

HIGH

Description

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions Hyper Historian versions 10.97.3 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior allows a local attacker to execute a malicious code by storing a specially crafted DLL in a specific folder when GENESIS64, ICONICS Suite, Hyper Historian, GENESIS32, and MC Works64 are installed with the Pager agent in the alarm multi-agent notification feature.

VendorProductVersions

Mitsubishi Electric Iconics Digital Solutions

GENESIS64

affected
10.97.3 and prior

Mitsubishi Electric Corporation

GENESIS64

affected
10.97.3 and prior

Mitsubishi Electric Iconics Digital Solutions

ICONICS Suite

affected
10.97.3 and prior

Mitsubishi Electric Corporation

ICONICS Suite

affected
10.97.3 and prior

Mitsubishi Electric Iconics Digital Solutions

Hyper Historian

affected
10.97.3 and prior

Mitsubishi Electric Corporation

Hyper Historian

affected
10.97.3 and prior

Mitsubishi Electric Iconics Digital Solutions

GENESIS32

affected
versions 9.7 and prior

Mitsubishi Electric Corporation

GENESIS32

affected
versions 9.7 and prior

Mitsubishi Electric Corporation

MC Works64

affected
all versions

Weaknesses (CWE)

CWE-427

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now