IC
Vendor
Iconics
75
CVEs
0
On KEV
0
New 30D
Products
GE9.8
Genesis64
Iconics
19 CVEs0 on KEV0 new
GE9.8
Genesis32
Iconics
10 CVEs0 on KEV0 new
BI9.8
Bizviz
Iconics
9 CVEs0 on KEV0 new
HH9.8
Hyper Historian
Iconics
7 CVEs0 on KEV0 new
MO9.8
Mobilehmi
Iconics
7 CVEs0 on KEV0 new
EA9.8
Energy Analytix
Iconics
5 CVEs0 on KEV0 new
FA9.8
Facility Analytix
Iconics
5 CVEs0 on KEV0 new
QA9.8
Quality Analytix
Iconics
5 CVEs0 on KEV0 new
SE9.8
Smart Energy Analytix
Iconics
5 CVEs0 on KEV0 new
AN9.8
Analytix
Iconics
1 CVEs0 on KEV0 new
DW–
Dialog Wrapper Module Activex Control
Iconics
1 CVEs0 on KEV0 new
WE7.5
Webhmi
Iconics
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-7587 | GE Genesis64 Iconics | 7.8 | Oct 22 | Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric… |
| CVE-2022-40264 | GE Genesis64 Iconics | 7.1 | Dec 14 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an… |
| CVE-2022-33320 | GE Genesis64 Iconics | 7.8 | Jul 20 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97… |
| CVE-2022-33319 | GE Genesis64 Iconics | 9.1 | Jul 20 | Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1,… |
| CVE-2022-33318 | GE Genesis64 Iconics | 9.8 | Jul 20 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97… |
| CVE-2022-33317 | GE Genesis64 Iconics | 7.8 | Jul 20 | Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions… |
| CVE-2022-33316 | GE Genesis64 Iconics | 7.8 | Jul 20 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97… |
| CVE-2022-33315 | GE Genesis64 Iconics | 7.8 | Jul 20 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97… |
| CVE-2022-29834 | GE Genesis64 Iconics | 7.5 | Jul 20 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric… |
| CVE-2022-23130 | GE Genesis64 Iconics | 5.5 | Jan 21 | Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics… |
| CVE-2022-23129 | GE Genesis64 Iconics | 5.5 | Jan 21 | Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a… |
| CVE-2022-23128 | GE Genesis64 Iconics | 9.8 | Jan 21 | Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to… |
| CVE-2022-23127 | MO Mobilehmi Iconics | 6.1 | Jan 21 | Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote… |
| CVE-2021-27041 | GE Genesis64 Iconics | 7.8 | Jun 25 | A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files |
| CVE-2021-27040 | GE Genesis64 Iconics | 3.3 | Jun 25 | A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file |
| CVE-2020-12015 | EA Energy Analytix Iconics | 7.5 | Jul 16 | A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization |
| CVE-2020-12013 | EA Energy Analytix Iconics | 9.1 | Jul 16 | A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely |
| CVE-2020-12007 | GE Genesis32 Iconics | 9.8 | Jul 16 | A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability |
| CVE-2020-12009 | GE Genesis32 Iconics | 7.5 | Jul 16 | A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability |
| CVE-2020-12011 | HH Hyper Historian Iconics | 9.8 | Jul 16 | A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution |
| CVE-2016-2289 | WE Webhmi Iconics | 7.5 | Apr 1 | Directory traversal vulnerability in ICONICS WebHMI 9 and earlier allows remote attackers to read configuration files, and consequently discover password hashes, via unspecified… |
| CVE-2014-0758 | GE Genesis32 Iconics | – | Feb 24 | An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document |
| CVE-2012-3018 | GE Genesis32 Iconics | – | Jul 31 | The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses an improper encryption algorithm for… |
| CVE-2011-5089 | GE Genesis32 Iconics | – | Apr 18 | Buffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9.2 and BizViz 8.05, 9.0, 9.1, and 9.2 allows remote attackers to cause a denial of… |
| CVE-2011-5088 | BI Bizviz Iconics | – | Apr 18 | The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which allows remote attackers to… |
| CVE-2011-2089 | GE Genesis32 Iconics | – | May 13 | Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22… |
| CVE-2006-6488 | DW Dialog Wrapper Module Activex Control Iconics | – | Dec 31 | Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch,… |