Priority MEDIUM 42
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 an…
CVSS 4.0CRITICAL 9.4· Network · High privileges · No interaction · EPSS 0.00291 · Published 2026-10-15 · No fix listed CWE-266
Priority LOW 32
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Histori…
CVSS 4.0HIGH 7.1· Local · High privileges · No interaction · EPSS 0.0011 · Published 2026-10-15 · No fix listed CWE-640
Priority MEDIUM 42
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Histori…
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00384 · Published 2026-10-15 · No fix listed CWE-640
Priority MEDIUM 41
Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI ver…
CVSS 4.0CRITICAL 9.3· Local · Low privileges · No interaction · EPSS 0.00096 · Published 2026-04-08 · No fix listed CWE-317
Priority MEDIUM 41
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 1…
CVSS 4.0CRITICAL 9.3· Local · Low privileges · No interaction · EPSS 0.00096 · Published 2026-04-08 · No fix listed CWE-312
Priority LOW 38
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad function") of Mitsubishi Electric GENESIS64 v…
CVSS 3.1HIGH 8.2· Local · Low privileges · User interaction · EPSS 0.00566 · Published 2025-12-19 · No fix listed CWE-78
Priority LOW 26
Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileH…
CVSS 3.1MEDIUM 5.9· Local · Low privileges · User interaction · EPSS 0.00232 · Published 2025-08-06 · No fix listed CWE-64
Priority LOW 28
Execution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Mobi…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.0023 · Published 2025-05-15 · No fix listed CWE-250
Priority LOW 36
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00242 · Published 2024-11-28 · No fix listed CWE-427
Priority LOW 32
Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00197 · Published 2024-11-28 · No fix listed CWE-561
Priority LOW 36
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00242 · Published 2024-11-28 · No fix listed CWE-427
Priority LOW 35
Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versio…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2024-10-22 · No fix listed CWE-276
Priority LOW 31
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite ver…
CVSS 3.1MEDIUM 6.7· Local · Low privileges · User interaction · EPSS 0.0019 · Published 2024-07-04 · No fix listed CWE-470
Priority LOW 29
Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsu…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00588 · Published 2024-07-04 · No fix listed CWE-306
Priority LOW 32
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0026 · Published 2024-07-04 · No fix listed CWE-427
Priority LOW 31
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or…
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00313 · Published 2022-12-13 · No fix listed CWE-22
Priority MEDIUM 43
Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 1…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01719 · Published 2022-07-20 · No fix listed CWE-125
Priority HIGH 73
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.50054 · Published 2022-07-20 · No fix listed CWE-502
Priority LOW 34
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00457 · Published 2022-07-20 · No fix listed CWE-502
Priority LOW 34
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00333 · Published 2022-07-20 · No fix listed CWE-502
Priority LOW 34
Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsub…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00319 · Published 2022-07-20 · No fix listed CWE-829
Priority LOW 34
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00333 · Published 2022-07-20 · No fix listed CWE-502
Priority LOW 36
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01715 · Published 2022-07-20 · No fix listed CWE-22
Priority MEDIUM 47
Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02884 · Published 2022-01-21 · No fix listed
Priority LOW 30
Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authenticatio…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01614 · Published 2022-01-21 · No fix listed CWE-79
Load more