Read the docs
TI-2026-74680 Aliases CVE-2026-16436GHSA-j5vq-rv93-4ff2

Weak password recovery in Mitsubishi Electric GENESIS software

Priority MEDIUM 42CWE-640Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-640.

Summary

Mitsubishi Electric GENESIS through 11.03, GENESIS64 through 10.97.3, ICONICS Suite through 10.97.3, Hyper Historian through 10.97.3, AnalytiX through 10.97.3, MobileHMI through 10.97.3, IoTWorX through 10.97.3, MC Works64 (all versions), and other products are affected. The password recovery mechanism (CWE-640) uses a challenge response that is common to all users and fixed. A remote attacker who obtains that challenge response can unlock the system, which may let them disclose, tamper with, destroy or delete internal information or cause a denial-of-service condition.

Written with Claude Haiku 5.5 from the sources below · 2026-11-05

Description from the CNA

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, GENESIS32 all versions, and BizViz all versions allows a remote attacker to unlock the system by obtaining the challenge response by some means. The challenge response used to unlock the system is common to all users and fixed. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00384 32nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Mitsubishi Electric CorporationGENESISup to 11.03—No fix listedCNA
Mitsubishi Electric Iconics Digital SolutionsGENESISup to 11.03—No fix listedCNA
Mitsubishi Electric CorporationGENESIS64up to 10.97.3—No fix listedCNA
Mitsubishi Electric Iconics Digital SolutionsGENESIS64up to 10.97.3—No fix listedCNA
Mitsubishi Electric CorporationICONICS Suiteup to 10.97.3—No fix listedCNA
Mitsubishi Electric Iconics Digital SolutionsICONICS Suiteup to 10.97.3—No fix listedCNA
Mitsubishi Electric CorporationHyper Historianup to 10.97.3—No fix listedCNA
Mitsubishi Electric Iconics Digital SolutionsHyper Historianup to 10.97.3—No fix listedCNA
Mitsubishi Electric CorporationAnalytiXup to 10.97.3—No fix listedCNA
Mitsubishi Electric Iconics Digital SolutionsAnalytiXup to 10.97.3—No fix listedCNA
Mitsubishi Electric CorporationMobileHMIup to 10.97.3—No fix listedCNA
Mitsubishi Electric Iconics Digital SolutionsMobileHMIup to 10.97.3—No fix listedCNA
Mitsubishi Electric CorporationIoTWorXup to 10.97.3—No fix listedCNA
Mitsubishi Electric Iconics Digital SolutionsIoTWorXup to 10.97.3—No fix listedCNA
Mitsubishi Electric CorporationMC Works64all versions—No fix listedCNA
Mitsubishi Electric CorporationGENESIS32all versions—No fix listedCNA
Mitsubishi Electric Iconics Digital SolutionsGENESIS32all versions—No fix listedCNA
Mitsubishi Electric CorporationBizVizall versions—No fix listedCNA
Mitsubishi Electric Iconics Digital SolutionsBizVizall versions—No fix listedCNA

Remediation

The sources list no fixed version for GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX or MC Works64.

Written with Claude Haiku 5.5 from the sources below · 2026-11-05

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Mitsubishi Electric AnalytiX, BizViz and 8 more products — mitsubishielectric.com/psirt/vulnerability/pdf/2026-006_en.…

    3 records Highest priority Priority MEDIUM 2 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2026-74682 Excess DCOM permissions in Mitsubishi Electric Iconics productsPriority MEDIUM 42
    • TI-2026-74681 Weak password recovery in Mitsubishi Electric ICONICS productsPriority LOW 32
    Show all 3 records → Advisory →

Timeline

  1. 2026-10-16 Threatist record created from CVE-2026-16436
  2. 2026-10-16 Priority changed: LOW → MEDIUM
  3. 2026-11-05 2 new references · CNA
  4. 2026-11-05 Alias added: GHSA-j5vq-rv93-4ff2

References

Advisory 1

Other 2

  • TI-2022-14737 Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64 CVSS 3.1CRITICAL 9.8
  • TI-2022-19113 Authentication Bypass Vulnerability in Web Server Function on MELSEC Series CVSS 3.1CRITICAL 9.1
  • TI-2023-01345 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module CVSS 3.1CRITICAL 10.0
  • TI-2023-06346 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CVSS 3.1CRITICAL 9.8
  • TI-2023-03131 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series CVSS 3.1CRITICAL 9.8
  • TI-2021-03821 Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool CVSS 3.1CRITICAL 9.8
See all 151 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences