Priority HIGH 73
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.50054 · Published 2022-07-20 · No fix listed CWE-502
Priority HIGH 65
A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.29194 · Published 2020-07-16 · No fix listed CWE-787
Priority MEDIUM 49
A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03938 · Published 2020-07-16 · No fix listed CWE-502
Priority MEDIUM 47
Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02884 · Published 2022-01-21 · No fix listed
Priority MEDIUM 45
A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03029 · Published 2020-07-16 · No fix listed CWE-94
Priority MEDIUM 43
Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 1…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01719 · Published 2022-07-20 · No fix listed CWE-125
Priority LOW 39
A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03596 · Published 2020-07-16 · No fix listed CWE-502
Priority LOW 37
A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01696 · Published 2021-06-25 · No fix listed CWE-787
Priority LOW 37
A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02032 · Published 2020-07-16 · No fix listed CWE-502
Priority LOW 36
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01715 · Published 2022-07-20 · No fix listed CWE-22
Priority LOW 35
Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versio…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2024-10-22 · No fix listed CWE-276
Priority LOW 34
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00457 · Published 2022-07-20 · No fix listed CWE-502
Priority LOW 34
Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsub…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00319 · Published 2022-07-20 · No fix listed CWE-829
Priority LOW 34
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00333 · Published 2022-07-20 · No fix listed CWE-502
Priority LOW 34
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00333 · Published 2022-07-20 · No fix listed CWE-502
Priority LOW 31
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or…
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00313 · Published 2022-12-13 · No fix listed CWE-22
Priority LOW 28
Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and…
CVSS 3.1MEDIUM 5.9· Adjacent network · High privileges · User interaction · EPSS 0.01004 · Published 2022-01-21 · No fix listed CWE-126
Priority LOW 24
Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authenti…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00186 · Published 2022-01-21 · No fix listed CWE-312
Priority LOW 21
A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.02743 · Published 2021-06-25 · No fix listed CWE-125