CVE-2024-1182
highPriorität · verfolgen · 0EPSS 0.003 · 17. PerzentilEUUSEPSS · bewertet 2026-10-23
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions Hyper Historian versions 10.97.3 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior allows a local attacker to execute a malicious code by storing a specially crafted DLL in a specific folder when GENESIS64, ICONICS Suite, Hyper Historian, GENESIS32, and MC Works64 are installed with the Pager agent in the alarm multi-agent notification feature.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenGENESIS64cisa_csaf_ot
For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf - BehobenGENESIS64cisa_csaf_ot
For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The latest white papers can be found at "https://iconics.com/About/Security/CERT".
https://iconics.com/about/security/cert - BehobenHyper Historiancisa_csaf_ot
For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf - BehobenHyper Historiancisa_csaf_ot
For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The latest white papers can be found at "https://iconics.com/About/Security/CERT".
https://iconics.com/about/security/cert - BehobenICONICS Suitecisa_csaf_ot
For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf".
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf - BehobenICONICS Suitecisa_csaf_ot
For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The latest white papers can be found at "https://iconics.com/About/Security/CERT".
https://iconics.com/about/security/cert - MitigationGENESIS32cisa_csaf_ot
For users of GENESIS64, ICONICS Suite, and Hyper Historian that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from custom installing this feature unless you specifically need it. The affected feature, the multi-agent notification feature, is no longer the part of the default installation for GENESIS64, ICONICS Suite, and Hyper Historian Version 10.97.3 and later. For users of GENESIS32 and MC Works64 that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from installing the multi-agent notification feature.
- MitigationGENESIS64cisa_csaf_ot
For users of GENESIS64, ICONICS Suite, and Hyper Historian that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from custom installing this feature unless you specifically need it. The affected feature, the multi-agent notification feature, is no longer the part of the default installation for GENESIS64, ICONICS Suite, and Hyper Historian Version 10.97.3 and later. For users of GENESIS32 and MC Works64 that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from installing the multi-agent notification feature.
- MitigationHyper Historiancisa_csaf_ot
For users of GENESIS64, ICONICS Suite, and Hyper Historian that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from custom installing this feature unless you specifically need it. The affected feature, the multi-agent notification feature, is no longer the part of the default installation for GENESIS64, ICONICS Suite, and Hyper Historian Version 10.97.3 and later. For users of GENESIS32 and MC Works64 that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from installing the multi-agent notification feature.
- MitigationICONICS Suitecisa_csaf_ot
For users of GENESIS64, ICONICS Suite, and Hyper Historian that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from custom installing this feature unless you specifically need it. The affected feature, the multi-agent notification feature, is no longer the part of the default installation for GENESIS64, ICONICS Suite, and Hyper Historian Version 10.97.3 and later. For users of GENESIS32 and MC Works64 that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from installing the multi-agent notification feature.
- MitigationMC Works64cisa_csaf_ot
For users of GENESIS64, ICONICS Suite, and Hyper Historian that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from custom installing this feature unless you specifically need it. The affected feature, the multi-agent notification feature, is no longer the part of the default installation for GENESIS64, ICONICS Suite, and Hyper Historian Version 10.97.3 and later. For users of GENESIS32 and MC Works64 that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from installing the multi-agent notification feature.
- Kein Fix geplantGENESIS32cisa_csaf_ot
Please take the mitigations since there are no plans to release a security update for Mitsubishi Electric GENESIS32 and MC Works64.
- Kein Fix geplantGENESIS32cisa_csaf_ot
Please take the mitigations since there are no plans to release a security update for Mitsubishi Electric Iconics Digital Solutions GENESIS32.
- Kein Fix geplantGENESIS64cisa_csaf_ot
For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.
- Kein Fix geplantGENESIS64cisa_csaf_ot
For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.
- Kein Fix geplantHyper Historiancisa_csaf_ot
For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.
- Kein Fix geplantHyper Historiancisa_csaf_ot
For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.
- Kein Fix geplantICONICS Suitecisa_csaf_ot
For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.
- Kein Fix geplantICONICS Suitecisa_csaf_ot
For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.
- Kein Fix geplantMC Works64cisa_csaf_ot
Please take the mitigations since there are no plans to release a security update for Mitsubishi Electric GENESIS32 and MC Works64.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.4–7
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (23)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-24-184-03Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update E)2024-06-27icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could result in denial-of-service, improper privilege management, or potentially arbitrary code execution.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (11)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2024-1182/cnnvd
- https://jvn.jp/vu/JVNVU98894016/cnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-03cnnvd
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-004_en.pdfcnnvd
- https://jvn.jp/vu/JVNVU98894016/enisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-03enisa_euvd
- https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdfenisa_euvd
- https://jvn.jp/vu/JVNVU98894016/nvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan