Critical ICSA-20-170-03 5 CVEs

ICONICS GENESIS64, GENESIS32

Published Jun 18, 2020 · Updated Jun 18, 2020

Vendor: ICONICS Product: AnalytiX Product: BizViz Product: GENESIS32 Product: GENESIS64 Product: Hyper Historian Product: MobileHMI

Summary

Successful exploitation of these vulnerabilities may allow remote code execution or denial of service.

Vulnerabilities 5

Unscored —

CVE-2020-12007

A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of…

Mitsubishi Electric ICONICS MC Works64 MC Works32 ICS / OT

Jul 16, 2020
Unscored —

CVE-2020-12009

A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a…

Mitsubishi Electric ICONICS MC Works64 MC Works32 ICS / OT

Jul 16, 2020
Unscored —

CVE-2020-12011 EPSS 29%

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allo…

Jul 16, 2020
Unscored —

CVE-2020-12013

A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotel…

Mitsubishi Electric ICONICS MC Works64 MC Works32 ICS / OT

Jul 16, 2020
Unscored —

CVE-2020-12015

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to …

Mitsubishi Electric ICONICS MC Works64 MC Works32 ICS / OT

Jul 16, 2020

Revision history

2020-06-18 #1
ICSA-20-170-03 ICONICS GENESIS64, GENESIS32

References

ICS Advisory ICSA-20-170-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-170-03
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B