Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

41 records

Priority MEDIUM 42

Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 an…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00291 Published 2026-10-15 No fix listed CWE-266
Priority LOW 32

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Histori…

CVSS 4.0HIGH 7.1 Local High privileges No interaction EPSS 0.0011 Published 2026-10-15 No fix listed CWE-640
Priority MEDIUM 42

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Histori…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00384 Published 2026-10-15 No fix listed CWE-640
Priority MEDIUM 41

Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI ver…

CVSS 4.0CRITICAL 9.3 Local Low privileges No interaction EPSS 0.00096 Published 2026-04-08 No fix listed CWE-317
Priority MEDIUM 41

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 1…

CVSS 4.0CRITICAL 9.3 Local Low privileges No interaction EPSS 0.00096 Published 2026-04-08 No fix listed CWE-312
Priority LOW 38

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad function") of Mitsubishi Electric GENESIS64 v…

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00566 Published 2025-12-19 No fix listed CWE-78
Priority LOW 26

Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileH…

CVSS 3.1MEDIUM 5.9 Local Low privileges User interaction EPSS 0.00232 Published 2025-08-06 No fix listed CWE-64
Priority LOW 28

Execution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Mobi…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.0023 Published 2025-05-15 No fix listed CWE-250
Priority LOW 36

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00242 Published 2024-11-28 No fix listed CWE-427
Priority LOW 32

Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00197 Published 2024-11-28 No fix listed CWE-561
Priority LOW 36

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00242 Published 2024-11-28 No fix listed CWE-427
Priority LOW 35

Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versio…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2024-10-22 No fix listed CWE-276
Priority LOW 31

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite ver…

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.0019 Published 2024-07-04 No fix listed CWE-470
Priority LOW 29

Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsu…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00588 Published 2024-07-04 No fix listed CWE-306
Priority LOW 32

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0026 Published 2024-07-04 No fix listed CWE-427
Priority LOW 31

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or…

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00313 Published 2022-12-13 No fix listed CWE-22
Priority MEDIUM 43

Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 1…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01719 Published 2022-07-20 No fix listed CWE-125
Priority HIGH 73

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.50054 Published 2022-07-20 No fix listed CWE-502
Priority LOW 34

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00457 Published 2022-07-20 No fix listed CWE-502
Priority LOW 34

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00333 Published 2022-07-20 No fix listed CWE-502
Priority LOW 34

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS S…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00333 Published 2022-07-20 No fix listed CWE-502
Priority LOW 36

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01715 Published 2022-07-20 No fix listed CWE-22
Priority LOW 30

Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authenticatio…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01614 Published 2022-01-21 No fix listed CWE-79
Load more