CVE-2024-8299

CVE-2024-8299 is an Uncontrolled Search Path Element vulnerability affecting ICONICS GENESIS64, ICONICS Suite, MC Works64, and GENESIS32 (all versions). The root cause is DLL hijacking via a local, authenticated attacker storing a specially crafted DLL in a target folder, enabling arbitrary code ...

PT-2024-8832

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 all versions Mitsubishi Electric GENESIS64 all versions Mitsubishi Electric MC Works64 all versions Description The issue is related to an uncontrolled search path element, which can be exploited by a local authenticated...

PT-2024-8959

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric FA Connector SCADA-system GENESIS64 versions 10.97.2 through 10.97.3 ICONICS GENESIS64 versions 10.97.2 through 10.97.3 Description The issue is related to the presence of dead code in the GENESIS64 system, which can be...

Mitsubishi Electric MC Works64和Mitsubishi Electric GENESIS64 代码问题漏洞

Mitsubishi Electric MC Works64 and Mitsubishi Electric GENESIS64 are both products of Mitsubishi Electric Corporation Mitsubishi Electric, Japan.The Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA. Mitsubishi Electric GENESIS64 is a SCADA kit. Mitsubishi Electric ...

Mitsubishi Electric GENESIS64和Mitsubishi Electric MC Works64 代码问题漏洞

Mitsubishi Electric MC Works64 and Mitsubishi Electric GENESIS64 are both products of Mitsubishi Electric Corporation Mitsubishi Electric of Japan.Mitsubishi Electric MC Works64 is a data acquisition and monitoring system Mitsubishi Electric GENESIS64 is a SCADA kit. A code issue vulnerability...

PT-2024-9087

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 all versions Mitsubishi Electric GENESIS64 all versions Mitsubishi Electric MC Works64 all versions Description The issue is related to an uncontrolled search path element, which can be exploited by a local authenticated...

ICONICS GENESIS64 安全漏洞

ICONICS GENESIS64 is a suite of advanced HMI SCADA solutions designed for Microsoft operating systems from ICONICS USA. A security vulnerability exists in ICONICS GENESIS64 that stems from the presence of a dead code vulnerability that allows a local, authenticated attacker to execute malicious...

The vulnerability of the GENESIS64 SCADA system’s software packages for monitoring and data collection, provided by MC Works64, allows a intruder to trigger maintenance failures or gain access to protected information.

The vulnerability of the SCADA system GENESIS64, related to the software packages for monitoring and data collection from MC Works64, stems from the improper use of standard permissions. Exploiting this vulnerability can allow an intruder to trigger maintenance failures or gain access to protecte...

CVE-2024-7587 Information Disclosure, Information Tampering and Denial of Service (DoS) Vulnerability in GENESIS64, ICONICS Suite, MC Works64, and GENESIS32

Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and...

CVE-2024-7587

CVE-2024-7587 describes an Incorrect Default Permissions vulnerability in GenBroker32, distributed with Mitsubishi Electric GENESIS64 (10.97.3 and prior), ICONICS Suite GENESIS64/ICONICS Suite (10.97.3 and prior), GENESIS32 (9.70.300.23 and prior), and MC Works64 (all versions). The root cause is...

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : ICONICS, Mitsubishi Electric Equipment : ICONICS Product Suite, Mitsubishi Electric MC Works64 Vulnerability : Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Mitsubishi Electric MC Works64和Mitsubishi Electric GENESIS64 安全漏洞

Mitsubishi Electric MC Works64 and Mitsubishi Electric GENESIS64 are both products of Mitsubishi Electric Corporation Mitsubishi Electric, Japan.Mitsubishi Electric MC Works64 is a data acquisition and monitoring system Mitsubishi Electric GENESIS64 is a SCADA kit. A security vulnerability exists...

PT-2024-7226

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.3 and prior Mitsubishi Electric GENESIS64 versions 10.97.3 and prior Mitsubishi Electric MC Works64 all versions Description The issue is related to incorrect default permissions in GenBroker32, which is includ...

The vulnerability of the GraphWorX64 module in the GENESIS64 SCADA system allows a intruder to execute arbitrary code.

The vulnerability of the GraphWorX64 module in the GENESIS64 SCADA system is related to errors in the code. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2024-1574

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 a...

CVE-2024-1573

Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 and prior, Mitsubishi Electri...

CVE-2024-1182

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electri...

CVE-2024-1574

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 a...

CVE-2024-1574

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 a...

CVE-2024-1574

CVE-2024-1574 is an Unsafe Reflection vulnerability in the licensing service of ICONICS/Mitsubishi Electric products. Affected: ICONICS GENESIS64 and ICONICS Suite (GENESIS64, Hyper Historian, AnalytiX, MobileHMI) up to version 10.97.2; ICONICS GENESIS32/BizViz lines up to 9.7; MC Works64 all ver...