Genesis64 vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

GE

Product

Genesis64

by Iconics · last CVE Oct 22, 2024

19

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities19 In the news0 Timeline

Severity mix

Critical 6High 10Medium 2Low 1

Severity

All severities19 Critical6 High10 Medium2 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Genesis64 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-7587	7.8	0%	Oct 22	Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric… Affected: through 10.97.3
CVE-2022-33320	7.8	0%	Jul 20	Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97… Affected: 10.97; 10.97.1
CVE-2022-33317	7.8	0%	Jul 20	Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions… Affected: 10.97; 10.97.1
CVE-2022-33316	7.8	0%	Jul 20	Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97… Affected: 10.97; 10.97.1
CVE-2022-33315	7.8	0%	Jul 20	Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97… Affected: 10.97; 10.97.1
CVE-2021-27041	7.8	2%	Jun 25	A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files Affected: through 10.97
CVE-2022-29834	7.5	2%	Jul 20	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric… Affected: 10.97; 10.97.1
CVE-2020-12015	7.5	2%	Jul 16	A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization Affected: All versions, or not specified
CVE-2020-12009	7.5	4%	Jul 16	A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability Affected: All versions, or not specified
CVE-2022-40264	7.1	0%	Dec 14	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an… Affected: 10.96 through 10.97.2