VYPR
← All vendors
Vendor

Iconics

Products
16
CVEs
28
Across products
96
Status
Private

Products

16

Recent CVEs

28
View all 28 CVEs →
  • CVE-2022-33318CriJul 20, 2022
    Iconics
    GENESIS64
    risk 0.67cvss 9.8epss 0.45

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2020-12011CriJul 16, 2020
    Iconics
    GenBroker64
    risk 0.66cvss 9.8epss 0.29

    A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; MC Works32 version 3.00A…

  • CVE-2022-23128CriJan 21, 2022
    Iconics
    GENESIS64
    risk 0.64cvss 9.8epss 0.03

    Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS AnalytiX versions 10.95.3 to 10.97…

  • CVE-2020-12007CriJul 16, 2020
    Iconics
    GenBroker64
    risk 0.64cvss 9.8epss 0.04

    A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all…

  • CVE-2020-12013CriJul 16, 2020
    Iconics
    GenBroker64
    risk 0.59cvss 9.1epss 0.03

    A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A…

  • CVE-2022-33319HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.53cvss 8.2epss 0.02

    Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital…

  • CVE-2024-7587HigOct 22, 2024
    Iconics
    GENESIS64
    risk 0.51cvss 7.8epss 0.00

    Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite…

  • CVE-2022-33320HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.51cvss 7.8epss 0.00

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2022-33317HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.51cvss 7.8epss 0.00

    Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1,…

  • CVE-2022-33316HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.51cvss 7.8epss 0.00

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2022-33315HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.51cvss 7.8epss 0.00

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2021-27041HigJun 25, 2021
    Autodesk
    DWG
    risk 0.51cvss 7.8epss 0.02

    A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code

  • CVE-2022-29834HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.49cvss 7.5epss 0.02

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions…

  • CVE-2020-12015HigJul 16, 2020
    Iconics
    GenBroker64
    risk 0.49cvss 7.5epss 0.02

    A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC…

  • CVE-2020-12009HigJul 16, 2020
    Iconics
    GenBroker64
    risk 0.49cvss 7.5epss 0.04

    A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC…

  • CVE-2016-2289HigApr 1, 2016
    Iconics
    Webhmi
    risk 0.49cvss 7.5epss 0.02

    Directory traversal vulnerability in ICONICS WebHMI 9 and earlier allows remote attackers to read configuration files, and consequently discover password hashes, via unspecified vectors.

  • CVE-2024-1574MedJul 4, 2024
    Iconics
    Genesis32
    risk 0.44cvss 6.7epss 0.00

    Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper…

  • CVE-2022-40264MedDec 14, 2022
    Iconics
    GENESIS64
    risk 0.41cvss 6.3epss 0.00

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or destroy arbitrary files by getting a legitimate user…

  • CVE-2022-23127MedJan 21, 2022
    Iconics
    MobileHMI
    risk 0.40cvss 6.1epss 0.02

    Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64 or MobileHMI and perform any…

  • CVE-2022-23130MedJan 21, 2022
    Iconics
    GENESIS64
    risk 0.38cvss 5.9epss 0.01

    Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi Electric ICONICS Suite versions 10.97…

View all 28 CVEs →