CVE-2020-12007

CVE-2020-12007 describes a deserialization vulnerability in ICONICS Genesis64/Genesis32 GenBroker components (FrameWorX server) that can enable remote code execution or a denial-of-service when processing specially crafted network packets. Affected products include GENESIS64 GenBroker64/FrameWorX...

CVE-2020-12011

CVE-2020-12011 affects ICONICS Genesis64/Genesis32 and Mitsubishi Electric MC Works64/MC Works32 families. The vulnerability is an out-of-bounds write in certain broker/server components that could be triggered by a specially crafted network packet, potentially causing denial of service or remote...

CVE-2020-12013

CVE-2020-12013 is a code-injection vulnerability affecting Mitsubishi Electric MC Works64 (4.02C and earlier) and MC Works32 (3.00A), as well as ICONICS GenBroker64/GenBroker32 components (FrameWorX/Platform Services/Workbench) up to the listed prior versions. The issue arises from a specially cr...

CVE-2020-12009

CVE-2020-12009 pertains to a deserialization vulnerability in ICONICS/Mitsubishi Electric MC Works64/MC Works32 components. A specially crafted network packet could trigger a denial-of-service condition in affected products: MC Works64 (versions up to 4.02C and prior, broker64), MC Works32 (3.00A...

CVE-2020-12015

CVE-2020-12015 is a deserialization of untrusted data vulnerability affecting Mitsubishi Electric MC Works64 (4.02C and earlier) and MC Works32 (3.00A), plus ICONICS GENESIS64/GENESIS32 components (GenBroker64/Platform Services/Workbench/FrameWorX Server v10.96 and earlier; GenBroker32 v9.5 and e...