CVE-2022-33318

CVE-2022-33318 affects ICONICS GENESIS64 and related MC Works64 products. The issue is Deserialization of Untrusted Data that, per Red Hat/PRION and CISA docs, could allow a remote unauthenticated attacker to execute arbitrary code by sending specially crafted packets to GENESIS64/MC Works64 serv...

CVE-2022-33320

ICONICS GENESIS64 family and related MC Works64 products are affected by a Deserialization of Untrusted Data vulnerability (CVE-2022-33320). The issue exists when a user loads a project configuration file containing malicious XML, enabling an unauthenticated attacker to execute arbitrary code via...

CVE-2022-33320

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2022-33315

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2022-33315

The CVE-2022-33315 issue is a deserialization vulnerability in Mitsubishi Electric GENESIS64 (including ICONICS GENESIS64, ICONICS Suite, and MC Works64) affecting 10.97–10.97.1 for GENESIS64/ICONICS Suite and 4.04E (10.95.210.01) and earlier for MC Works64. The root cause is deserialization of u...

CVE-2022-33317

Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric...

CVE-2022-33317

The CVE-2022-33317 issue affects Mitsubishi Electric ICONICS GENESIS64 family and MC Works64: GENESIS64 (including ICONICS GENESIS64, ICONICS Digital Solutions GENESIS64) up to version 10.97.1 and MC Works64 up to 4.04E. Root cause: Inclusion of Functionality from Untrusted Control Sphere enables...

CVE-2022-33316

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2022-33316

The CVE-2022-33316 issue affects Mitsubishi Electric GENESIS64 and ICONICS suites (GENESIS64, ICONICS Suite, ICONICS Digital Solutions ICONICS Suite) and MC Works64, with a root cause of Deserialization of Untrusted Data. Versions affected include GENESIS64 10.97–10.97.1 and MC Works64 <= 4.04...

CVE-2022-29834

Summary: CVE-2022-29834 is a path traversal vulnerability in ICONICS GENESIS64 and related ICONICS/Mitsubishi Electric products (versions 10.97 to 10.97.1) that allows a remote, unauthenticated attacker to access arbitrary files on the GENESIS64 or ICONICS Suite servers by embedding a crafted URL...

CVE-2022-29834

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, an...

PT-2022-6505

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.1 and prior Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior Description The issue is related to the deserialization of untrusted data, which can be exploited by an unauthenticated attacker ...

PT-2022-21765

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.1 and prior Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior Description The issue allows an unauthenticated attacker to execute arbitrary malicious code by leading a user to load a monitori...

CVE-2022-33315: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2022-33319: Out-of-bounds Read

Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite...

CVE-2022-33316: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2022-33317: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric...

Mitsubishi Electric MC Works64和Mitsubishi Electric Iconics Digital Solutions 安全漏洞

Mitsubishi Electric MC Works64 and Mitsubishi Electric Iconics Digital Solutions are both products of Mitsubishi Electric, Japan.Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA. Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA, and...

Mitsubishi Electric MC Works64和Mitsubishi Electric Iconics Digital Solutions 代码问题漏洞

Mitsubishi Electric MC Works64 and Mitsubishi Electric Iconics Digital Solutions are both products of Mitsubishi Electric, Japan.Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA. Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA, and...

CVE-2022-33318: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...