VYPR
← Iconics

Vendor CVEs

Iconics

All CVEs

28 total · sorted by risk
  • CVE-2022-33318CriJul 20, 2022
    Iconics
    GENESIS64
    risk 0.67cvss 9.8epss 0.45

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2020-12011CriJul 16, 2020
    Iconics
    GenBroker64
    risk 0.66cvss 9.8epss 0.29

    A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; MC Works32 version 3.00A…

  • CVE-2022-23128CriJan 21, 2022
    Iconics
    GENESIS64
    risk 0.64cvss 9.8epss 0.03

    Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS AnalytiX versions 10.95.3 to 10.97…

  • CVE-2020-12007CriJul 16, 2020
    Iconics
    GenBroker64
    risk 0.64cvss 9.8epss 0.04

    A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all…

  • CVE-2020-12013CriJul 16, 2020
    Iconics
    GenBroker64
    risk 0.59cvss 9.1epss 0.03

    A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A…

  • CVE-2022-33319HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.53cvss 8.2epss 0.02

    Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital…

  • CVE-2024-7587HigOct 22, 2024
    Iconics
    GENESIS64
    risk 0.51cvss 7.8epss 0.00

    Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite…

  • CVE-2022-33320HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.51cvss 7.8epss 0.00

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2022-33317HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.51cvss 7.8epss 0.00

    Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1,…

  • CVE-2022-33316HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.51cvss 7.8epss 0.00

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2022-33315HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.51cvss 7.8epss 0.00

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics…

  • CVE-2021-27041HigJun 25, 2021
    Autodesk
    DWG
    risk 0.51cvss 7.8epss 0.02

    A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code

  • CVE-2022-29834HigJul 20, 2022
    Iconics
    GENESIS64
    risk 0.49cvss 7.5epss 0.02

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions…

  • CVE-2020-12015HigJul 16, 2020
    Iconics
    GenBroker64
    risk 0.49cvss 7.5epss 0.02

    A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC…

  • CVE-2020-12009HigJul 16, 2020
    Iconics
    GenBroker64
    risk 0.49cvss 7.5epss 0.04

    A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC…

  • CVE-2016-2289HigApr 1, 2016
    Iconics
    Webhmi
    risk 0.49cvss 7.5epss 0.02

    Directory traversal vulnerability in ICONICS WebHMI 9 and earlier allows remote attackers to read configuration files, and consequently discover password hashes, via unspecified vectors.

  • CVE-2024-1574MedJul 4, 2024
    Iconics
    Genesis32
    risk 0.44cvss 6.7epss 0.00

    Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper…

  • CVE-2022-40264MedDec 14, 2022
    Iconics
    GENESIS64
    risk 0.41cvss 6.3epss 0.00

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or destroy arbitrary files by getting a legitimate user…

  • CVE-2022-23127MedJan 21, 2022
    Iconics
    MobileHMI
    risk 0.40cvss 6.1epss 0.02

    Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64 or MobileHMI and perform any…

  • CVE-2022-23130MedJan 21, 2022
    Iconics
    GENESIS64
    risk 0.38cvss 5.9epss 0.01

    Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi Electric ICONICS Suite versions 10.97…

  • CVE-2022-23129MedJan 21, 2022
    Iconics
    GENESIS64
    risk 0.36cvss 5.5epss 0.00

    Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally.…

  • CVE-2021-27040LowJun 25, 2021
    Autodesk
    DWG
    risk 0.22cvss 3.3epss 0.03

    A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.

  • CVE-2011-2089May 13, 2011
    Iconics
    Bizviz
    risk 0.06cvss —epss 0.38

    Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in…

  • CVE-2006-6488Dec 31, 2006
    Iconics
    Dialog Wrapper Module Activex Control
    risk 0.04cvss —epss 0.08

    Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long (1) FileName or (2)…

  • CVE-2014-0758Feb 24, 2014
    Iconics
    Genesis32
    risk 0.00cvss —epss 0.02

    An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document.

  • CVE-2012-3018Jul 31, 2012
    Iconics
    Bizviz
    risk 0.00cvss —epss 0.00

    The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses an improper encryption algorithm for generation of an authentication code, which allows local users to bypass intended access restrictions…

  • CVE-2011-5089Apr 18, 2012
    Iconics
    Bizviz
    risk 0.00cvss —epss 0.04

    Buffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9.2 and BizViz 8.05, 9.0, 9.1, and 9.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long password.

  • CVE-2011-5088Apr 18, 2012
    Iconics
    Bizviz
    risk 0.00cvss —epss 0.03

    The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which allows remote attackers to execute arbitrary code via a crafted web site, related to a "Workbench32/WebHMI component SetTrustedZone…