Skip to content
OpenAdvisories
Critical ICSA-22-020-01 4 CVEs

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric HMI SCADA (Update B)

Published Jan 20, 2022 · Updated Mar 5, 2026 · Revision 3

Vendor: Mitsubishi Electric Vendor: Mitsubishi Electric Iconics Digital Solutions Product: AnalytiX Product: AnalytiX Product: GENESIS32 Product: GENESIS32 Product: GENESIS64 Product: GENESIS64 Product: Hyper Historian Product: Hyper Historian Product: ICONICS Suite Product: ICONICS Suite Product: MC Works64 Product: MobileHMI Product: MobileHMI

Summary

Successful exploitation of these vulnerabilities could result in unauthorized access to information or to GENESIS64 and MC Works64 functionality, or the disabling of SQL Server in GENESIS64, ICONICS Suite, MC Works64, or GENESIS32.

Vulnerabilities 4

  • Medium 5.9
    CVE-2022-23130

    Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64…

    Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 GENESIS64 ICS / OT
  • Unscored —
    CVE-2022-23127

    Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONIC…

  • Unscored —
    CVE-2022-23128

    Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4…

  • Unscored —
    CVE-2022-23129

    Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior…

Revision history

  1. #3

    Update B - Fixes for affected versions and typographical errors

  2. #2

    Update A - Added GENESIS32.

  3. #1

    IInitial Publication

References