Read the docs

Mitsubishi Electric Iconics Digital Solutions

Records41All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

Mitsubishi Electric Iconics Digital Solutions records in CISA KEV

No Mitsubishi Electric Iconics Digital Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

19 records in Genesis64 · all components

Priority HIGH 73

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.50054 Published 2022-07-20 No fix listed CWE-502
Priority HIGH 65

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.29194 Published 2020-07-16 No fix listed CWE-787
Priority MEDIUM 45

A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03029 Published 2020-07-16 No fix listed CWE-94
Priority MEDIUM 43

Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 1…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01719 Published 2022-07-20 No fix listed CWE-125
Priority LOW 36

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01715 Published 2022-07-20 No fix listed CWE-22
Priority LOW 35

Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versio…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2024-10-22 No fix listed CWE-276
Priority LOW 34

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00457 Published 2022-07-20 No fix listed CWE-502
Priority LOW 34

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00333 Published 2022-07-20 No fix listed CWE-502
Priority LOW 34

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00333 Published 2022-07-20 No fix listed CWE-502
Priority LOW 31

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or…

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00313 Published 2022-12-13 No fix listed CWE-22
Priority LOW 28

Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and…

CVSS 3.1MEDIUM 5.9 Adjacent network High privileges User interaction EPSS 0.01004 Published 2022-01-21 No fix listed CWE-126
Priority LOW 24

Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authenti…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00186 Published 2022-01-21 No fix listed CWE-312
Open these records in search →