ID: CVE-2024-1573
Published: 2024-07-04T09:15Z
Description: description_data: Improper Authentication vulnerability in the mobile monitoring feature of ICONICS GENESIS64 versions 10.97 to 10.97.2, Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.2 and Mitsubishi Electric MC Works64 all versions allows a remote unauthenticated attacker to bypass proper authentication and log in to the system when all of the following conditions are met:  *  Active Directory is used in the security setting.
  *  “Automatic log in” option is enabled in the security setting.
  *  The IcoAnyGlass IIS Application Pool is running under an Active Directory Domain Account.
  *  The IcoAnyGlass IIS Application Pool account is included in GENESIS64TM and MC Works64 Security and has permission to log in.
CWE: problemtype_data: description: CWE-287