Cross site scripting

Out-of-bounds Read vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior allows a remote unauthenticated attacker to disclose information on memory or cause a Denial of Service DoS condition by sending specially...

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior allows a remote unauthenticated attacker to execute an arbitrary malicious code by sending specially crafted packets to the...

CVE-2022-33319

Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite...

CVE-2022-33318

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2022-33318

CVE-2022-33318 affects ICONICS GENESIS64 and related MC Works64 products. The issue is Deserialization of Untrusted Data that, per Red Hat/PRION and CISA docs, could allow a remote unauthenticated attacker to execute arbitrary code by sending specially crafted packets to GENESIS64/MC Works64 serv...

CVE-2022-33320

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2022-33320

ICONICS GENESIS64 family and related MC Works64 products are affected by a Deserialization of Untrusted Data vulnerability (CVE-2022-33320). The issue exists when a user loads a project configuration file containing malicious XML, enabling an unauthenticated attacker to execute arbitrary code via...

CVE-2022-33315

The CVE-2022-33315 issue is a deserialization vulnerability in Mitsubishi Electric GENESIS64 (including ICONICS GENESIS64, ICONICS Suite, and MC Works64) affecting 10.97–10.97.1 for GENESIS64/ICONICS Suite and 4.04E (10.95.210.01) and earlier for MC Works64. The root cause is deserialization of u...

CVE-2022-33315

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2022-33317

The CVE-2022-33317 issue affects Mitsubishi Electric ICONICS GENESIS64 family and MC Works64: GENESIS64 (including ICONICS GENESIS64, ICONICS Digital Solutions GENESIS64) up to version 10.97.1 and MC Works64 up to 4.04E. Root cause: Inclusion of Functionality from Untrusted Control Sphere enables...

CVE-2022-33317

Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric...

CVE-2022-33316

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2022-33316

The CVE-2022-33316 issue affects Mitsubishi Electric GENESIS64 and ICONICS suites (GENESIS64, ICONICS Suite, ICONICS Digital Solutions ICONICS Suite) and MC Works64, with a root cause of Deserialization of Untrusted Data. Versions affected include GENESIS64 10.97–10.97.1 and MC Works64 <= 4.04...

CVE-2022-29834

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, an...

CVE-2022-29834

Summary: CVE-2022-29834 is a path traversal vulnerability in ICONICS GENESIS64 and related ICONICS/Mitsubishi Electric products (versions 10.97 to 10.97.1) that allows a remote, unauthenticated attacker to access arbitrary files on the GENESIS64 or ICONICS Suite servers by embedding a crafted URL...

PT-2022-21766

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.1 and prior Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior Description The Deserialization of Untrusted Data issue allows a remote unauthenticated attacker to execute arbitrary malicious...

PT-2022-21764

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.1 and prior Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior Description The issue allows an unauthenticated attacker to execute arbitrary malicious code by leading a user to load a monitori...

PT-2022-21768

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.1 and prior Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior Description The issue allows an unauthenticated attacker to execute arbitrary malicious code by leading a user to load a project...

PT-2022-21765

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.1 and prior Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior Description The issue allows an unauthenticated attacker to execute arbitrary malicious code by leading a user to load a monitori...

PT-2022-6505

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.1 and prior Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior Description The issue is related to the deserialization of untrusted data, which can be exploited by an unauthenticated attacker ...