CVE-2024-1573

Improper Authentication vulnerability in the mobile monitoring feature of ICONICS GENESIS64 versions 10.97 to 10.97.2, Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.2 and Mitsubishi Electric MC Works64 all versions allows a remote unauthenticated attacker to bypass proper authentication and log in to the system when all of the following conditions are met: * Active Directory is used in the security setting. * “Automatic log in” option is enabled in the security setting. * The IcoAnyGlass IIS Application Pool is running under an Active Directory Domain Account. * The IcoAnyGlass IIS Application Pool account is included in GENESIS64TM and MC Works64 Security and has permission to log in.

CVSS v3 5.9 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://jvn.jp/vu/JVNVU98894016/
https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-03
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-004_en.pdf
https://jvn.jp/vu/JVNVU98894016/
https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-03
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-004_en.pdf

Configurations

No configuration.

History

21 Nov 2024, 08:50

Type	Values Removed	Values Added
References	~~() https://jvn.jp/vu/JVNVU98894016/ -~~	() https://jvn.jp/vu/JVNVU98894016/ -
References	~~() https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-03 -~~	() https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-03 -
References	~~() https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-004_en.pdf -~~	() https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-004_en.pdf -

04 Jul 2024, 09:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-07-04 09:15

Updated : 2024-11-21 08:50

NVD link : CVE-2024-1573

Mitre link : CVE-2024-1573

CVE.ORG link : CVE-2024-1573

JSON object : View

Products Affected

No product.

CWE

CWE-287

Improper Authentication

{"id": "CVE-2024-1573", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2024-07-04T09:15:03.260", "references": [{"url": "https://jvn.jp/vu/JVNVU98894016/", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-03", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}, {"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-004_en.pdf", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}, {"url": "https://jvn.jp/vu/JVNVU98894016/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-03", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-004_en.pdf", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "Improper Authentication vulnerability in the mobile monitoring feature of ICONICS GENESIS64 versions 10.97 to 10.97.2, Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.2 and Mitsubishi Electric MC Works64 all versions allows a remote unauthenticated attacker to bypass proper authentication and log in to the system when all of the following conditions are met: * Active Directory is used in the security setting.\n * \u201cAutomatic log in\u201d option is enabled in the security setting.\n * The IcoAnyGlass IIS Application Pool is running under an Active Directory Domain Account.\n * The IcoAnyGlass IIS Application Pool account is included in GENESIS64TM and MC Works64 Security and has permission to log in."}, {"lang": "es", "value": "Vulnerabilidad de autenticaci\u00f3n incorrecta en la funci\u00f3n de monitoreo m\u00f3vil de ICONICS GENESIS64 versiones 10.97 a 10.97.2, Mitsubishi Electric GENESIS64 versiones 10.97 a 10.97.2 y Mitsubishi Electric MC Works64 todas las versiones permite que un atacante remoto no autenticado omita la autenticaci\u00f3n adecuada e inicie sesi\u00f3n en el sistema cuando Se cumplen todas las condiciones siguientes: * Se utiliza Active Directory en la configuraci\u00f3n de seguridad. * La opci\u00f3n \"Inicio de sesi\u00f3n autom\u00e1tico\" est\u00e1 habilitada en la configuraci\u00f3n de seguridad. * El grupo de aplicaciones IcoAnyGlass IIS se ejecuta en una cuenta de dominio de Active Directory. * La cuenta del grupo de aplicaciones IcoAnyGlass IIS est\u00e1 incluida en GENESIS64TM y MC Works64 Security y tiene permiso para iniciar sesi\u00f3n."}], "lastModified": "2024-11-21T08:50:51.837", "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}