Browse CVEs

HIGH 7.8 CVE-2024-7587 Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 an… Genesis64 after 10.97.3 Fix from $1,9502024-10-22 HIGH 7.1 CVE-2022-40264 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 … Genesis64 after 10.97.2 Fix from $1,9502022-12-14 CRITICAL 9.8 CVE-2022-33318EPSS 45% Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solut… Genesis64 after 10.95.210.01 Fix from $2,3002022-07-20 CRITICAL 9.1 CVE-2022-33319 Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 … Genesis64 after 10.95.210.01 Fix from $2,3002022-07-20 HIGH 7.8 CVE-2022-33315 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solut… Genesis64 after 10.95.210.01 Fix from $1,9502022-07-20 HIGH 7.8 CVE-2022-33316 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solut… Genesis64 after 10.95.210.01 Fix from $1,9502022-07-20 HIGH 7.8 CVE-2022-33317 Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electri… Genesis64 after 10.95.210.01 Fix from $1,9502022-07-20 HIGH 7.8 CVE-2022-33320 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solut… Genesis64 after 10.95.210.01 Fix from $1,9502022-07-20 HIGH 7.5 CVE-2022-29834 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97… Genesis64 Mitigation only Fix from $1,9502022-07-20 MEDIUM 5.5 CVE-2022-23129 Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 version… Genesis64 10.95.210.01+ Fix from $1,6002022-01-21 MEDIUM 5.5 CVE-2022-23130 Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mit… Genesis64 after 10.97 Fix from $1,6002022-01-21 CRITICAL 9.8 CVE-2022-23128 Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS G… Analytix after 10.97 Fix from $2,3002022-01-21 MEDIUM 6.1 CVE-2022-23127 Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 a… Mobilehmi 10.95.210.01+ Fix from $1,6002022-01-21 HIGH 7.5 CVE-2016-2289 Directory traversal vulnerability in ICONICS WebHMI 9 and earlier allows remote attackers to read configuration files, and consequently discover pass… Webhmi after 9.0 Fix from $1,9502016-04-01 HIGH 9.3 CVE-2014-0758 An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafte… Genesis32 Mitigation only Fix from $1,9502014-02-24 HIGH 10.0 CVE-2011-5089 Buffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9.2 and BizViz 8.05, 9.0, 9.1, and 9.2 allows remote … Genesis32 Mitigation only Fix from $1,9502012-04-18 HIGH 9.3 CVE-2011-5088 The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which al… Bizviz Mitigation only Fix from $1,9502012-04-18 HIGH 9.3 CVE-2011-2089EPSS 38% Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in IC… Bizviz No fix yet Fix from $1,9502011-05-13 HIGH 7.5 CVE-2006-6488EPSS 8% Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONIC… Dialog Wrapper Module Activex Control after 8.4.165.0 Fix from $1,9502006-12-31