PT-2022-3929

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MC Works64 versions 4.00A 10.95.201.23 to 4.04E 10.95.210.01 ICONICS GENESIS64 versions 10.95.3 to 10.97 ICONICS Hyper Historian versions 10.95.3 to 10.97 ICONICS AnalytiX versions 10.95.3 to 10.97 ICONICS MobileHMI version...

PT-2021-8059

Name of the Vulnerable Software and Affected Versions GENESIS64 WorkBench64 module affected versions not specified Description The issue is related to incorrect security checks for standard elements in the WorkBench64 module of the GENESIS64 SCADA system. Exploitation of this issue could allow a...

PT-2021-8062

Name of the Vulnerable Software and Affected Versions GENESIS64 affected versions not specified Description The issue is related to errors in the code of the GraphWorX64 module in the GENESIS64 SCADA system. Exploitation of this issue could allow a remote attacker to execute arbitrary code...

PT-2021-8065

Name of the Vulnerable Software and Affected Versions GENESIS64 version affected versions not specified Description The issue is related to the GraphWorX64 module of the GENESIS64 SCADA system, where it fails to neutralize special elements. This can be exploited by a remote attacker to upload...

PT-2021-8055

Name of the Vulnerable Software and Affected Versions GENESIS64 WorkBench64 module affected versions not specified Description The issue is related to errors in the implementation of security checks for standard elements in the WorkBench64 module of the GENESIS64 SCADA system. Exploitation of thi...

ICONICS GENESIS64 DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of ICONICS GENESIS64. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

ICONICS GENESIS64 DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of ICONICS GENESIS64. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendors: ICONICS, Mitsubishi Electric Equipment: ICONICS GENESIS64, Mitsubishi Electric MC Works64 Vulnerability: Uncontrolled Recursion 2. RISK EVALUATION Successful exploitation of this vulnerability could...

PT-2021-3659

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified ICONICS GENESIS64 affected versions not specified Description A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This issue can be exploited...

(Pwn2Own) ICONICS Genesis64 PKGX Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

The vulnerablity allows remote attackers to execute arbitrary code on affected installations of ICONICS Genesis64. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PK...

ICONICS Genesis64 TestQuery SQL Injection Remote Code Execution Vulnerability

The vulnerablity allows remote attackers to execute arbitrary code on affected installations of ICONICS Genesis64. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of requests to the TestQuery endpoint of the IcoFwxServer service. The...

(Pwn2Own) ICONICS Genesis64 IcoFwxServer Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ICONICS Genesis64. Authentication is not required to exploit this vulnerability. The specific flaw exists with the handling of serialized objects. The issue results from the lack of proper validation...

(Pwn2Own) ICONICS Genesis64 VariantClear Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ICONICS Genesis64. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of indexes. The issue results from the lack of proper validation of...

(Pwn2Own) ICONICS Genesis64 fwxserver Deserialization Denial-Of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ICONICS Genesis64. Authentication is not required to exploit this vulnerability. The specific flaw exists with the handling of serialized objects. The issue results from the lack of...

ICONICS GENESIS64, GENESIS32

1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely Vendor: ICONICS Equipment: GENESIS64, GENESIS32 Vulnerabilities: Out-of-Bounds Write, Deserialization of Untrusted Data, Code Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow remote code...

iconics genesis32 and genesis64 - Multiple Vulnerabilities

No description provided by source...

iconics genesis32 and genesis64 - Multiple Vulnerabilities

Sources: http://aluigi.org/adv/genesis1-adv.txt http://aluigi.org/adv/genesis2-adv.txt http://aluigi.org/adv/genesis3-adv.txt http://aluigi.org/adv/genesis4-adv.txt http://aluigi.org/adv/genesis5-adv.txt http://aluigi.org/adv/genesis6-adv.txt http://aluigi.org/adv/genesis7-adv.txt...