CVE-2024-8300 is a dead code vulnerability impacting multiple versions of Mitsubishi Electric's GENESIS64 and ICONICS Suite products. A local, authenticated attacker can exploit this by tampering with a specially crafted DLL, leading to information disclosure, tampering, destruction, or denial of service. With a CVSS score of 7.0 (HIGH), this vulnerability requires low privileges and high attack complexity, but can result in high impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, and no public exploit code is available, though it has garnered some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Mitsubishi Electric Corporation | GENESIS64 | Version 10.97.2 CFR1, Version 10.97.2 CRF2, Version 10.97.2, Version 10.97.3CNA affecteddefault unaffected | |
| Mitsubishi Electric Iconics Digital Solutions | GENESIS64 | Version 10.97.2 CFR1, Version 10.97.2 CRF2, Version 10.97.2, Version 10.97.3CNA affecteddefault unaffected | |
| Mitsubishi Electric Corporation | ICONICS Suite | Version 10.97.2 CFR1, Version 10.97.2 CRF2, Version 10.97.2, Version 10.97.3CNA affecteddefault unaffected | |
| Mitsubishi Electric Iconics Digital Solutions | ICONICS Suite | Version 10.97.2 CFR1, Version 10.97.2 CRF2, Version 10.97.2, Version 10.97.3CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.