ezsocket vulnerabilities and fixes
Recent CVEs affecting ezsocket, with upgrade or downgrade steps. 14 tracked.
ezsocket has 14 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 12. Most recent: 2024-07-02. Highest priority: CVE-2023-6943 (score 60/100).
- CVE-2024-26314 HIGH 7.8 UPGRADE MITIGATE Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privi
- CVE-2024-25088 HIGH 7.8 UPGRADE MITIGATE Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges a
- CVE-2024-25087 MEDIUM 5.5 UPGRADE MITIGATE Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windo
- CVE-2024-25086 HIGH 7.8 UPGRADE MITIGATE Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges a
- CVE-2024-22106 HIGH 7.8 UPGRADE MITIGATE Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges,
- CVE-2024-22105 MEDIUM 5.5 UPGRADE MITIGATE Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windo
- CVE-2024-22104 MEDIUM 5.5 UPGRADE MITIGATE Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows b
- CVE-2024-22103 MEDIUM 5.5 UPGRADE MITIGATE Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows b
- CVE-2024-22102 MEDIUM 5.5 UPGRADE MITIGATE Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windo
- CVE-2023-6943 CRITICAL 9.8 DOWNGRADE MITIGATE Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi
- CVE-2023-6942 HIGH 7.5 DOWNGRADE MITIGATE Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket version
- CVE-2023-51778 MEDIUM 5.5 UPGRADE MITIGATE Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows b
- CVE-2023-51777 MEDIUM 5.5 UPGRADE MITIGATE Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windo
- CVE-2023-51776 HIGH 7.8 UPGRADE MITIGATE Improper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate privileges a
FAQ
How do I fix ezsocket vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ezsocket being exploited right now?
None of the tracked ezsocket CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ezsocket CVE should I patch first?
CVE-2023-6943 currently ranks highest (60/100): Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi.