CVE-2022-23128

The CVE-2022-23128 entry describes an Incomplete List of Disallowed Inputs vulnerability affecting Mitsubishi Electric MC Works64 (versions 4.00A to 4.04E) and ICONICS GENESIS64, Hyper Historian, AnalytiX, and MobileHMI (versions 10.95.3 to 10.97). The root cause is a bypass of authentication via...

CVE-2022-23130

CVE-2022-23130 describes a Buffer Over-read in Mitsubishi Electric MC Works64 (v4.00A–4.04E) and related ICONICS GENESIS64/GENESIS32 products up to prior versions. The root cause is a memory allocation error in the SQL query engine that can crash the SQL Server, enabling DoS when a config file wi...

CVE-2020-12007

CVE-2020-12007 describes a deserialization vulnerability in ICONICS Genesis64/Genesis32 GenBroker components (FrameWorX server) that can enable remote code execution or a denial-of-service when processing specially crafted network packets. Affected products include GENESIS64 GenBroker64/FrameWorX...

CVE-2020-12011

CVE-2020-12011 affects ICONICS Genesis64/Genesis32 and Mitsubishi Electric MC Works64/MC Works32 families. The vulnerability is an out-of-bounds write in certain broker/server components that could be triggered by a specially crafted network packet, potentially causing denial of service or remote...

CVE-2020-12013

CVE-2020-12013 is a code-injection vulnerability affecting Mitsubishi Electric MC Works64 (4.02C and earlier) and MC Works32 (3.00A), as well as ICONICS GenBroker64/GenBroker32 components (FrameWorX/Platform Services/Workbench) up to the listed prior versions. The issue arises from a specially cr...

CVE-2020-12009

CVE-2020-12009 pertains to a deserialization vulnerability in ICONICS/Mitsubishi Electric MC Works64/MC Works32 components. A specially crafted network packet could trigger a denial-of-service condition in affected products: MC Works64 (versions up to 4.02C and prior, broker64), MC Works32 (3.00A...

CVE-2020-12015

CVE-2020-12015 is a deserialization of untrusted data vulnerability affecting Mitsubishi Electric MC Works64 (4.02C and earlier) and MC Works32 (3.00A), plus ICONICS GENESIS64/GENESIS32 components (GenBroker64/Platform Services/Workbench/FrameWorX Server v10.96 and earlier; GenBroker32 v9.5 and e...