İçeriğe atla
Noroxi

ICONICS kayıtları

iconics üreticisine ait 33 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %3
Pre-auth RCE
8
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 21
  3. 22
  4. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

33 kayıt
  • CVE-2022-33318
    53Planlayın

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi

    KritikCVSS 9,8İstismar yokEPSS %48

    iconics · genesis6420 Tem 2022

  • CVE-2011-2089
    48Planlayın

    Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsys

    KritikCVSS 9,3SilahlaştırılmışEPSS %38

    iconics · bizviz13 May 2011

  • CVE-2020-12011
    48Planlayın

    A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code executi

    KritikCVSS 9,8İstismar yokEPSS %29

    mitsubishielectric · mc works16 Tem 2020

  • CVE-2011-5089
    41Planlayın

    Buffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9.2 and BizViz 8.05, 9.0, 9.1, and 9.2 allow

    KritikCVSS 10,0İstismar yokEPSS %4

    iconics · genesis3218 Nis 2012

  • CVE-2020-12007
    40Planlayın

    A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition du

    KritikCVSS 9,8İstismar yokEPSS %4

    mitsubishielectric · mc works16 Tem 2020

  • CVE-2022-23128
    40Planlayın

    Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01),

    KritikCVSS 9,8İstismar yokEPSS %3

    iconics · analytix21 Oca 2022

  • CVE-2011-5088
    38İzleyin

    The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input,

    KritikCVSS 9,3İstismar yokEPSS %3

    iconics · bizviz18 Nis 2012

  • CVE-2014-0758
    38İzleyin

    ICONICS GENESIS32 Exposed Dangerous Method or Function

    KritikCVSS 9,3İstismar yokEPSS %2

    iconics · genesis3224 Şub 2014

  • CVE-2020-12013
    37İzleyin

    A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely.

    KritikCVSS 9,1İstismar yokEPSS %3

    mitsubishielectric · mc works3216 Tem 2020

  • CVE-2022-33319
    36İzleyin

    Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions G

    KritikCVSS 9,1İstismar yokEPSS %2

    iconics · genesis6420 Tem 2022

  • CVE-2006-6488
    32İzleyin

    Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used

    YüksekCVSS 7,5Kavram kanıtıEPSS %8

    iconics · dialog wrapper module activex control31 Ara 2006

  • CVE-2021-27041
    32İzleyin

    A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files.

    YüksekCVSS 7,8İstismar yokEPSS %2

    autodesk · advance steel25 Haz 2021

  • CVE-2020-12009
    31İzleyin

    A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vuln

    YüksekCVSS 7,5İstismar yokEPSS %4

    mitsubishielectric · mc works16 Tem 2020

  • CVE-2016-2289
    31İzleyin

    Directory traversal vulnerability in ICONICS WebHMI 9 and earlier allows remote attackers to read configuration files, and consequently disc

    YüksekCVSS 7,5İstismar yokEPSS %2

    iconics · webhmi1 Nis 2016

  • CVE-2020-12015
    31İzleyin

    A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserializat

    YüksekCVSS 7,5İstismar yokEPSS %2

    mitsubishielectric · mc works16 Tem 2020

  • CVE-2022-33320
    31İzleyin

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi

    YüksekCVSS 7,8İstismar yokEPSS %0

    iconics · genesis6420 Tem 2022

  • CVE-2022-33316
    31İzleyin

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi

    YüksekCVSS 7,8İstismar yokEPSS %0

    iconics · genesis6420 Tem 2022

  • CVE-2022-33315
    31İzleyin

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi

    YüksekCVSS 7,8İstismar yokEPSS %0

    iconics · genesis6420 Tem 2022

  • CVE-2022-33317
    31İzleyin

    Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubish

    YüksekCVSS 7,8İstismar yokEPSS %0

    iconics · genesis6420 Tem 2022

  • CVE-2024-9852
    31İzleyin

    Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32

    YüksekCVSS 7,8İstismar yokEPSS %0

    mitsubishi electric corporation · genesis6428 Kas 2024

  • CVE-2024-8299
    31İzleyin

    Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32

    YüksekCVSS 7,8İstismar yokEPSS %0

    mitsubishi electric corporation · genesis6428 Kas 2024

  • CVE-2024-7587
    31İzleyin

    Information Disclosure, Information Tampering and Denial of Service (DoS) Vulnerability in GENESIS64, ICONICS Suite, MC Works64, and GENESIS32

    YüksekCVSS 7,8İstismar yokEPSS %0

    iconics · genesis6422 Eki 2024

  • CVE-2022-29834
    30İzleyin

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97

    YüksekCVSS 7,5İstismar yokEPSS %2

    iconics · genesis6420 Tem 2022

  • CVE-2022-40264
    28İzleyin

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versio

    YüksekCVSS 7,1İstismar yokEPSS %0

    iconics · genesis6413 Ara 2022

  • CVE-2024-1182
    28İzleyin

    Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suit

    YüksekCVSS 7,0İstismar yokEPSS %0

    mitsubishi electric iconics digital solutions · genesis644 Tem 2024