Vulnerabilities

Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10…

Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authenticatio…

A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability.

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization.

A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely.

A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability.

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution.