8.8
Élevée
CVE-2024-3904 Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series…
Description
Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows a local attacker to execute arbitrary code by saving a malicious file to a specific folder. As a result, the attacker may disclose, tamper with, destroy or delete information in the product, or cause a denial-of-service (DoS) condition on the product.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MELIPC Series MI5122-VW | Versions non publiées | |
| melipc_mi5122-vw_firmware 05 | 05 → 07 | Pas de correctif indiqué |
Autres CVE de MELIPC Series MI5122-VW
Les 5 CVE de MELIPC Series MI5122-VW →
CVE-2022-33324
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU…
7.5
Élevée
CVE-2021-20611
Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series…
7.5
Élevée
CVE-2021-20610
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series…
7.5
Élevée
CVE-2021-20609
Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R…
7.5
Élevée