8.8
High
CVE-2024-3904 Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series…
Description
Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows a local attacker to execute arbitrary code by saving a malicious file to a specific folder. As a result, the attacker may disclose, tamper with, destroy or delete information in the product, or cause a denial-of-service (DoS) condition on the product.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MELIPC Series MI5122-VW | Versions not published | |
| melipc_mi5122-vw_firmware 05 | 05 → 07 | No fix stated |
Other CVEs of MELIPC Series MI5122-VW
The 5 CVEs of MELIPC Series MI5122-VW →
CVE-2022-33324
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU…
7.5
High
CVE-2021-20611
Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series…
7.5
High
CVE-2021-20610
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series…
7.5
High
CVE-2021-20609
Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R…
7.5
High