Ezsocket vulnerabilities

4 known vulnerabilities in Ezsocket from Mitsubishi Electric. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  windriver: Improper Privilege Management

  CVE-2024-22106Jul 2, 2024Jungo

  Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service (DoS).

• 9.8 Critical severity

  EZSocket: Use of Externally-Controlled Input to Select Classes or Code

  CVE-2023-6943Jan 30, 2024Mitsubishi ElectricEPSS 2.13%

  Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions

• 7.5 High severity

  EZSocket: Missing Authentication for Critical Functionality

  CVE-2023-6942Jan 30, 2024Mitsubishi Electric

  Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions

• 7.8 High severity

  GX Works3: Incorrect Default Permissions

  CVE-2023-4088Sep 20, 2023Mitsubishi Electric

  Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denia