Skip to content

Known vulnerabilities in Mitsubishi Electric Iconics Digital Solutions ICONICS Suite

Is your version affected?

CVE Summary Score Published
CVE-2026-16438 An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64 9.4 Critical Oct 15, 2026
CVE-2026-16437 An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz 7.1 High Oct 15, 2026
CVE-2026-16436 An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz 9.2 Critical Oct 15, 2026
CVE-2025-14816 Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and… 9.3 Critical Apr 8, 2026
CVE-2025-14815 Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior,… 9.3 Critical Apr 8, 2026
CVE-2025-11774 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software… 8.2 High Dec 19, 2025
CVE-2025-7376 Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions… 5.9 Medium Aug 6, 2025
CVE-2025-0921 Execution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions… 6.5 Medium May 15, 2025
CVE-2024-9852 Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi… 7.8 High Nov 28, 2024
CVE-2024-8300 Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3,… 7.0 High Nov 28, 2024
CVE-2024-8299 Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi… 7.8 High Nov 28, 2024
CVE-2024-7587 Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi… 7.8 High Oct 22, 2024
CVE-2024-1574 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing… 6.7 Medium Jul 4, 2024
CVE-2024-1573 Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric… 5.9 Medium Jul 4, 2024
CVE-2024-1182 Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi… 7.0 High Jul 4, 2024
CVE-2022-33319 Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics… 8.2 High Jul 20, 2022
CVE-2022-33318 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi… 9.8 Critical Jul 20, 2022
CVE-2022-33320 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi… 7.8 High Jul 20, 2022
CVE-2022-33315 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi… 7.8 High Jul 20, 2022
CVE-2022-33317 Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97… 7.8 High Jul 20, 2022
CVE-2022-33316 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi… 7.8 High Jul 20, 2022
CVE-2022-29834 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric… 7.5 High Jul 20, 2022
CVE-2022-23130 Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric… 5.9 Medium Jan 21, 2022

Other Mitsubishi Electric Iconics Digital Solutions products