10 matches found
CVE-2020-12007
CVE-2020-12007 describes a deserialization vulnerability in ICONICS Genesis64/Genesis32 GenBroker components (FrameWorX server) that can enable remote code execution or a denial-of-service when processing specially crafted network packets. Affected products include GENESIS64 GenBroker64/FrameWorX...
CVE-2020-12011
CVE-2020-12011 affects ICONICS Genesis64/Genesis32 and Mitsubishi Electric MC Works64/MC Works32 families. The vulnerability is an out-of-bounds write in certain broker/server components that could be triggered by a specially crafted network packet, potentially causing denial of service or remote...
CVE-2020-12013
CVE-2020-12013 is a code-injection vulnerability affecting Mitsubishi Electric MC Works64 (4.02C and earlier) and MC Works32 (3.00A), as well as ICONICS GenBroker64/GenBroker32 components (FrameWorX/Platform Services/Workbench) up to the listed prior versions. The issue arises from a specially cr...
CVE-2011-2089
Summary of CVE-2011-2089 (ICONICS WebHMI / BizViz / GENESIS32) : A stack-based buffer overflow in the GenVersion.dll VersionInfo ActiveX control (SetActiveXGUID) allows remote code execution via a long string argument. Affected: ICONICS BizViz 9.x (before 9.22) and GENESIS32 9.x (before 9.22) wit...
CVE-2020-12009
CVE-2020-12009 pertains to a deserialization vulnerability in ICONICS/Mitsubishi Electric MC Works64/MC Works32 components. A specially crafted network packet could trigger a denial-of-service condition in affected products: MC Works64 (versions up to 4.02C and prior, broker64), MC Works32 (3.00A...
CVE-2020-12015
CVE-2020-12015 is a deserialization of untrusted data vulnerability affecting Mitsubishi Electric MC Works64 (4.02C and earlier) and MC Works32 (3.00A), plus ICONICS GENESIS64/GENESIS32 components (GenBroker64/Platform Services/Workbench/FrameWorX Server v10.96 and earlier; GenBroker32 v9.5 and e...
CVE-2014-0758
ICONICS GENESIS32 CVE-2014-0758 affects GENESIS32 versions 8.0, 8.02, 8.04 and 8.05. An insecure ActiveX control in GenLaunch.htm can be exploited to execute arbitrary code via a crafted HTML document. Exploitation may be remote but requires user interaction; no public exploits are noted in the p...
CVE-2011-5088
The CVE covers the ICONICS GENESIS32/ BizViz SetTrustedZone vulnerability in the IcoSetServer ActiveX control (GENESIS32 9.21, BizViz 9.21). The issue arises when trusted zone policy is configured from user input, allowing a crafted website to trigger remote code execution through the WebHMI/Work...
CVE-2011-5089
The CVE-2011-5089 issue affects ICONICS GENESIS32 (versions 8.05, 9.0, 9.1, 9.2) and BizViz (8.05, 9.0, 9.1, 9.2). It is caused by a buffer overflow in the Security Login ActiveX controls that can be triggered by a long password, allowing remote attackers to cause a denial of service (application...