Iconics Genesis64
19 CVEs affecting Iconics Genesis64. Latest disclosed: 2024-10-22. Critical: 5, High: 10.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-33318 | Critical | 9.8 | 2022-07-20 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENES… |
CVE-2022-23128 | Critical | 9.8 | 2022-01-21 | Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 v… |
CVE-2020-12007 | Critical | 9.8 | 2020-07-16 | A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserializat… |
CVE-2020-12011 | Critical | 9.8 | 2020-07-16 | A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affe… |
CVE-2020-12013 | Critical | 9.1 | 2020-07-16 | A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC… |
CVE-2022-33319 | High | 8.2 | 2022-07-20 | Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 1… |
CVE-2024-7587 | High | 7.8 | 2024-10-22 | Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, M… |
CVE-2022-33320 | High | 7.8 | 2022-07-20 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENES… |
CVE-2022-33317 | High | 7.8 | 2022-07-20 | Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics… |
CVE-2022-33316 | High | 7.8 | 2022-07-20 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENES… |
CVE-2022-33315 | High | 7.8 | 2022-07-20 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENES… |
CVE-2021-27041 | High | 7.8 | 2021-06-25 | A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitra… |
CVE-2022-29834 | High | 7.5 | 2022-07-20 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsub… |
CVE-2020-12015 | High | 7.5 | 2020-07-16 | A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This issue aff… |
CVE-2020-12009 | High | 7.5 | 2020-07-16 | A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability. This aff… |
CVE-2022-40264 | Medium | 6.3 | 2022-12-14 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2… |
CVE-2022-23130 | Medium | 5.9 | 2022-01-21 | Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi El… |
CVE-2022-23129 | Medium | 5.5 | 2022-01-21 | Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to… |
CVE-2021-27040 | Low | 3.3 | 2021-06-25 | A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbi… |