Skip to content
OpenAdvisories
High ICSA-24-184-03 5 CVEs

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update E)

Published Jun 27, 2024 · Updated Jun 4, 2026 · Revision 11

Vendor: Mitsubishi Electric Vendor: Mitsubishi Electric Iconics Digital Solutions Product: AnalytiX Product: AnalytiX Product: BizViz Product: BizViz Product: GENESIS32 Product: GENESIS32 Product: GENESIS64 Product: GENESIS64 Product: Hyper Historian Product: Hyper Historian Product: ICONICS Suite Product: ICONICS Suite Product: IoTWorX Product: IoTWorX Product: MC Works64 Product: MobileHMI Product: MobileHMI

Summary

Successful exploitation of these vulnerabilities could result in denial-of-service, improper privilege management, or potentially arbitrary code execution.

Vulnerabilities 5

Revision history

  1. #11

    CISA Republication update based on Mitsubishi Electric 2024-004 advisory

  2. #10

    Added ICONICS Suite, Hyper Historian, AnalytiX, Mobile HMI, and IoTWorX to "Description" and "Mitigations/Workarounds" of CVE-2024-1573.

  3. #8

    CISA Republication - Update D - Added Hyper Historian, AnalytiX, and MobileHMI for affected products

  4. #9

    Added Hyper Historian, AnalytiX, Mobile HMI, and IoTWorX to Affected Products. And modified "Title", "Overview", "Description", "Countermeasures for Customers", "Countermeasure for Products", "Mitigations/Workarounds."

  5. #7

    CISA Republication - Update C - Fixes for affected versions and typographical errors

  6. #6

    CISA Republication - Update B - Added GENESIS32.

  7. #5

    Added ICONICS Suite, GENESIS32 and BizViz to Affected Products.

  8. #4

    CISA Republication - Update A - Added Mitsubishi Electric MC Works64, re-categorized CVE-2023-4807 as CWE-347.

  9. #3

    Added the Acknowledgement.

  10. #2

    CISA Republication - Initial Publication

  11. #1

    Initial Publication

References