Skip to content
Noroxi

ICONICS records

33 published records for vendor iconics.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 3%
Pre-auth RCE
8
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

33 records
  • CVE-2022-33318
    54Plan

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi

    CriticalCVSS 9.8No exploitEPSS 50%

    iconics · genesis64Jul 20, 2022

  • CVE-2011-2089
    48Plan

    Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsys

    CriticalCVSS 9.3WeaponizedEPSS 38%

    iconics · bizvizMay 13, 2011

  • CVE-2020-12011
    48Plan

    A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code executi

    CriticalCVSS 9.8No exploitEPSS 29%

    mitsubishielectric · mc worksJul 16, 2020

  • CVE-2011-5089
    41Plan

    Buffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9.2 and BizViz 8.05, 9.0, 9.1, and 9.2 allow

    CriticalCVSS 10.0No exploitEPSS 4%

    iconics · genesis32Apr 18, 2012

  • CVE-2020-12007
    40Plan

    A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition du

    CriticalCVSS 9.8No exploitEPSS 4%

    mitsubishielectric · mc worksJul 16, 2020

  • CVE-2022-23128
    40Plan

    Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01),

    CriticalCVSS 9.8No exploitEPSS 3%

    iconics · analytixJan 21, 2022

  • CVE-2011-5088
    38Monitor

    The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input,

    CriticalCVSS 9.3No exploitEPSS 3%

    iconics · bizvizApr 18, 2012

  • CVE-2014-0758
    38Monitor

    ICONICS GENESIS32 Exposed Dangerous Method or Function

    CriticalCVSS 9.3No exploitEPSS 2%

    iconics · genesis32Feb 24, 2014

  • CVE-2020-12013
    37Monitor

    A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely.

    CriticalCVSS 9.1No exploitEPSS 3%

    mitsubishielectric · mc works32Jul 16, 2020

  • CVE-2022-33319
    37Monitor

    Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions G

    CriticalCVSS 9.1No exploitEPSS 2%

    iconics · genesis64Jul 20, 2022

  • CVE-2006-6488
    32Monitor

    Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used

    HighCVSS 7.5Proof of conceptEPSS 8%

    iconics · dialog wrapper module activex controlDec 31, 2006

  • CVE-2021-27041
    32Monitor

    A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files.

    HighCVSS 7.8No exploitEPSS 2%

    autodesk · advance steelJun 25, 2021

  • CVE-2020-12009
    31Monitor

    A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vuln

    HighCVSS 7.5No exploitEPSS 4%

    mitsubishielectric · mc worksJul 16, 2020

  • CVE-2016-2289
    31Monitor

    Directory traversal vulnerability in ICONICS WebHMI 9 and earlier allows remote attackers to read configuration files, and consequently disc

    HighCVSS 7.5No exploitEPSS 2%

    iconics · webhmiApr 1, 2016

  • CVE-2020-12015
    31Monitor

    A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserializat

    HighCVSS 7.5No exploitEPSS 2%

    mitsubishielectric · mc worksJul 16, 2020

  • CVE-2022-29834
    31Monitor

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97

    HighCVSS 7.5No exploitEPSS 2%

    iconics · genesis64Jul 20, 2022

  • CVE-2022-33320
    31Monitor

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi

    HighCVSS 7.8No exploitEPSS 0%

    iconics · genesis64Jul 20, 2022

  • CVE-2022-33315
    31Monitor

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi

    HighCVSS 7.8No exploitEPSS 0%

    iconics · genesis64Jul 20, 2022

  • CVE-2022-33316
    31Monitor

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi

    HighCVSS 7.8No exploitEPSS 0%

    iconics · genesis64Jul 20, 2022

  • CVE-2022-33317
    31Monitor

    Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubish

    HighCVSS 7.8No exploitEPSS 0%

    iconics · genesis64Jul 20, 2022

  • CVE-2024-9852
    31Monitor

    Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32

    HighCVSS 7.8No exploitEPSS 0%

    mitsubishi electric corporation · genesis64Nov 28, 2024

  • CVE-2024-8299
    31Monitor

    Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32

    HighCVSS 7.8No exploitEPSS 0%

    mitsubishi electric corporation · genesis64Nov 28, 2024

  • CVE-2024-7587
    31Monitor

    Information Disclosure, Information Tampering and Denial of Service (DoS) Vulnerability in GENESIS64, ICONICS Suite, MC Works64, and GENESIS32

    HighCVSS 7.8No exploitEPSS 0%

    iconics · genesis64Oct 22, 2024

  • CVE-2022-40264
    28Monitor

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versio

    HighCVSS 7.1No exploitEPSS 0%

    iconics · genesis64Dec 13, 2022

  • CVE-2024-1182
    28Monitor

    Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suit

    HighCVSS 7.0No exploitEPSS 0%

    mitsubishi electric iconics digital solutions · genesis64Jul 4, 2024