CVE-2022-23128

The CVE-2022-23128 entry describes an Incomplete List of Disallowed Inputs vulnerability affecting Mitsubishi Electric MC Works64 (versions 4.00A to 4.04E) and ICONICS GENESIS64, Hyper Historian, AnalytiX, and MobileHMI (versions 10.95.3 to 10.97). The root cause is a bypass of authentication via...

CVE-2022-23127

CVE-2022-23127 is a Cross-site Scripting (CWE-79) vulnerability affecting ICONICS MobileHMI and Mitsubishi Electric MC Works64. Connected Red Hat and CVE records specify: MC Works64 versions up to 4.04E (10.95.210.01) and MobileHMI versions up to 10.96.2 are vulnerable due to improper input valid...

CVE-2020-12007

CVE-2020-12007 describes a deserialization vulnerability in ICONICS Genesis64/Genesis32 GenBroker components (FrameWorX server) that can enable remote code execution or a denial-of-service when processing specially crafted network packets. Affected products include GENESIS64 GenBroker64/FrameWorX...

CVE-2020-12013

CVE-2020-12013 is a code-injection vulnerability affecting Mitsubishi Electric MC Works64 (4.02C and earlier) and MC Works32 (3.00A), as well as ICONICS GenBroker64/GenBroker32 components (FrameWorX/Platform Services/Workbench) up to the listed prior versions. The issue arises from a specially cr...

CVE-2020-12009

CVE-2020-12009 pertains to a deserialization vulnerability in ICONICS/Mitsubishi Electric MC Works64/MC Works32 components. A specially crafted network packet could trigger a denial-of-service condition in affected products: MC Works64 (versions up to 4.02C and prior, broker64), MC Works32 (3.00A...

CVE-2020-12011

CVE-2020-12011 affects ICONICS Genesis64/Genesis32 and Mitsubishi Electric MC Works64/MC Works32 families. The vulnerability is an out-of-bounds write in certain broker/server components that could be triggered by a specially crafted network packet, potentially causing denial of service or remote...

CVE-2020-12015

CVE-2020-12015 is a deserialization of untrusted data vulnerability affecting Mitsubishi Electric MC Works64 (4.02C and earlier) and MC Works32 (3.00A), plus ICONICS GENESIS64/GENESIS32 components (GenBroker64/Platform Services/Workbench/FrameWorX Server v10.96 and earlier; GenBroker32 v9.5 and e...