CVE-2023-51778

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).

Published: 2024-07-02 Last update: 2025-03-13 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2023-51778 is rated Low Risk (31.5/100): CVSS Medium severity, with low exploitation likelihood (EPSS 0.10%). Monitor for updates and reassess as exploit intelligence or EPSS changes.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2023-51778

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2025-06-23 0.28% 0.10% -0.19%
2 2025-06-22 0.04% 0.28% +0.24%
3 2025-04-15 — 0.04% —

Full EPSS history (5 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2023-51778

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.5 3.1 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Click to expand
Attack vector (AV:L)
They already need access on the box, or another person has to do something wrong; it’s not a remote drive-by.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:L)
A normal user session is enough; they don’t have to be admin.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U)
Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:N)
Doesn’t really leak secrets in a meaningful way.
Integrity (I:N)
Data isn’t meaningfully altered or forged.
Availability (A:H)
Could take the service down hard or make it unusable for people who depend on it.
 1.8 3.6 [email protected]
5.5 3.1 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Click to expand
Attack vector (AV:L)
They already need access on the box, or another person has to do something wrong; it’s not a remote drive-by.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:L)
A normal user session is enough; they don’t have to be admin.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U)
Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:N)
Doesn’t really leak secrets in a meaningful way.
Integrity (I:N)
Data isn’t meaningfully altered or forged.
Availability (A:H)
Could take the service down hard or make it unusable for people who depend on it.
 1.8 3.6 134c704f-9b21-4f2e-91b3-4a467353bcc0

Weakness enumeration for CVE-2023-51778

Affected software / configurations for CVE-2023-51778

Vendor Product Version Raw CPE
jungo windriver < 12.1.0 cpe:2.3:a:jungo:windriver:*:*:*:*:*:*:*:*
mitsubishielectric cpu_module_logging_configuration_tool — cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:*
mitsubishielectric cw_configurator — cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:*
mitsubishielectric data_transfer — cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:*
mitsubishielectric data_transfer_classic — cpe:2.3:a:mitsubishielectric:data_transfer_classic:*:*:*:*:*:*:*:*
mitsubishielectric ezsocket — cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:*
mitsubishielectric fr_configurator_sw3 — cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:*:*:*:*:*:*:*:*
mitsubishielectric fr_configurator2 — cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:*
mitsubishielectric genesis64 — cpe:2.3:a:mitsubishielectric:genesis64:*:*:*:*:*:*:*:*
mitsubishielectric gt_got1000 — cpe:2.3:a:mitsubishielectric:gt_got1000:*:*:*:*:*:*:*:*
mitsubishielectric gt_got2000 — cpe:2.3:a:mitsubishielectric:gt_got2000:*:*:*:*:*:*:*:*
mitsubishielectric gt_softgot1000 — cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:*
mitsubishielectric gt_softgot2000 — cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:*
mitsubishielectric gx_developer — cpe:2.3:a:mitsubishielectric:gx_developer:*:*:*:*:*:*:*:*
mitsubishielectric gx_logviewer — cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:*
mitsubishielectric gx_works2 — cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:*
mitsubishielectric gx_works3 — cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*
mitsubishielectric iq_works — cpe:2.3:a:mitsubishielectric:iq_works:*:*:*:*:*:*:*:*
mitsubishielectric mi_configurator — cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:*
mitsubishielectric mr_configurator — cpe:2.3:a:mitsubishielectric:mr_configurator:*:*:*:*:*:*:*:*
mitsubishielectric mr_configurator2 — cpe:2.3:a:mitsubishielectric:mr_configurator2:*:*:*:*:*:*:*:*
mitsubishielectric mx_component — cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:*
mitsubishielectric mx_opc_server_da\/ua — cpe:2.3:a:mitsubishielectric:mx_opc_server_da\/ua:*:*:*:*:*:*:*:*
mitsubishielectric numerical_control_device_communication — cpe:2.3:a:mitsubishielectric:numerical_control_device_communication:*:*:*:*:*:*:*:*
mitsubishielectric px_developer\/monitor_tool — cpe:2.3:a:mitsubishielectric:px_developer\/monitor_tool:*:*:*:*:*:*:*:*
mitsubishielectric rt_toolbox3 — cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:*
mitsubishielectric rt_visualbox — cpe:2.3:a:mitsubishielectric:rt_visualbox:*:*:*:*:*:*:*:*
mitsubishielectric mrzjw3-mc2-utl_firmware — cpe:2.3:o:mitsubishielectric:mrzjw3-mc2-utl_firmware:*:*:*:*:*:*:*:*
mitsubishielectric sw0dnc-mneth-b_firmware — cpe:2.3:o:mitsubishielectric:sw0dnc-mneth-b_firmware:*:*:*:*:*:*:*:*
mitsubishielectric sw1dnc-ccbd2-b_firmware — cpe:2.3:o:mitsubishielectric:sw1dnc-ccbd2-b_firmware:*:*:*:*:*:*:*:*
mitsubishielectric sw1dnc-ccief-j_firmware — cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-j_firmware:*:*:*:*:*:*:*:*
mitsubishielectric sw1dnc-ccief-b_firmware — cpe:2.3:o:mitsubishielectric:sw1dnc-ccief-b_firmware:*:*:*:*:*:*:*:*
mitsubishielectric sw1dnc-mnetg-b_firmware — cpe:2.3:o:mitsubishielectric:sw1dnc-mnetg-b_firmware:*:*:*:*:*:*:*:*
mitsubishielectric sw1dnc-qsccf-b_firmware — cpe:2.3:o:mitsubishielectric:sw1dnc-qsccf-b_firmware:*:*:*:*:*:*:*:*
mitsubishielectric sw1dnd-emsdk-b_firmware — cpe:2.3:o:mitsubishielectric:sw1dnd-emsdk-b_firmware:*:*:*:*:*:*:*:*

References for CVE-2023-51778

cvelogic Threat Intelligence