CVE-2022-33318

2022-07-2016:57:38

Mitsubishi

www.cve.org

deserialization of untrusted data

remote execution

arbitrary code

specially crafted packets

unauthenticated attacker

iconics genesis64

mitsubishi electric mc works64

security vulnerability

AI Score

9.8

Confidence

High

EPSS

0.006

Percentile

78.0%

JSON

Deserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows a remote unauthenticated attacker to execute an arbitrary malicious code by sending specially crafted packets to the GENESIS64 server.

CNA Affected

[
  {
    "product": "ICONICS GENESIS64; Mitsubishi Electric MC Works64",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ICONICS GENESIS64 versions 10.97.1 and prior"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior"
      }
    ]
  }
]