Mitsubishi Electric Iconics Digital Solutions

Records41All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

Mitsubishi Electric Iconics Digital Solutions records in CISA KEV

No Mitsubishi Electric Iconics Digital Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Genesis64 19 records HIGH Genesis32 10 records HIGH Bizviz 9 records HIGH Hyper Historian 7 records HIGH Mobilehmi 7 records HIGH Energy Analytix 5 records HIGH Facility Analytix 5 records HIGH Quality Analytix 5 records HIGH

Records

7 records in Hyper Historian · all components

TI-2020-09670 CVE-2020-12011 · GHSA-p8wr-hxwm-p363

Out-of-bounds write in Mitsubishi Electric MC Works64

HIGH 65

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.29194 Published 2020-07-16 No fix listed CWE-787

TI-2020-09666 CVE-2020-12007 · GHSA-c683-386m-9r6m

Deserialization of untrusted data in Mitsubishi Electric Corporation MC Works64

MEDIUM 49

A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03938 Published 2020-07-16 No fix listed CWE-502

TI-2022-07297 CVE-2022-23128 · GHSA-63gj-7jw2-qccf

Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64…

MEDIUM 47

Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02884 Published 2022-01-21 No fix listed

TI-2020-09672 CVE-2020-12013 · GHSA-m855-9ph3-r6p4

Code injection in Mitsubishi Electric Corporation MC Works64

MEDIUM 45

A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03029 Published 2020-07-16 No fix listed CWE-94

TI-2020-09668 CVE-2020-12009 · GHSA-ww65-5fcm-v6g6

Deserialization of untrusted data in Mitsubishi Electric Corporation MC Works64

LOW 39

A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03596 Published 2020-07-16 No fix listed CWE-502

TI-2020-09674 CVE-2020-12015 · GHSA-jfw2-jwr5-36c3

Deserialization of untrusted data in Mitsubishi Electric Corporation MC Works64

LOW 37

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02032 Published 2020-07-16 No fix listed CWE-502

TI-2022-07299 CVE-2022-23130 · GHSA-9q64-8g8h-wr27

Out-of-bounds read in Mitsubishi Electric Corporation GENESIS64

LOW 28

Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and…

CVSS 3.1MEDIUM 5.9 Adjacent network High privileges User interaction EPSS 0.01004 Published 2022-01-21 No fix listed CWE-126

Open these records in search →

Critical	14
High	18
Medium	8
Low	1
No CVSS	0