CVE-2024-8300
Description
Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, and Mitsubishi Electric Iconics Digital Solutions ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3 allows a local authenticated attacker to execute a malicious code by tampering with a specially crafted DLL. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or cause a denial of service (DoS) condition on the products.
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Mitsubishi Electric Corporation GENESIS64 | Version 10.97.2, Version 10.97.2 CFR1, Version 10.97.2 CRF2, Version 10.97.3 | — |
| Mitsubishi Electric Iconics Digital Solutions GENESIS64 | Version 10.97.2, Version 10.97.2 CFR1, Version 10.97.2 CRF2, Version 10.97.3 | — |
| Mitsubishi Electric Corporation ICONICS Suite | Version 10.97.2, Version 10.97.2 CFR1, Version 10.97.2 CRF2, Version 10.97.3 | — |
| Mitsubishi Electric Iconics Digital Solutions ICONICS Suite | Version 10.97.2, Version 10.97.2 CFR1, Version 10.97.2 CRF2, Version 10.97.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.