Skip to content
OpenAdvisories
High ICSA-24-296-01 1 CVE

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)

Published Oct 22, 2024 · Updated Feb 24, 2026 · Revision 4

Vendor: Mitsubishi Electric Vendor: Mitsubishi Electric Iconics Digital Solutions Product: AnalytiX Product: AnalytiX Product: GENESIS32 Product: GENESIS32 Product: GENESIS64 Product: GENESIS64 Product: Hyper Historian Product: Hyper Historian Product: ICONICS Suite Product: ICONICS Suite Product: MC Works64 Product: MobileHMI Product: MobileHMI

Summary

Successful exploitation of this vulnerability could result in disclosure of confidential information, data tampering, or a denial-of-service condition.

Vulnerabilities 1

  • High 7.8
    CVE-2024-7587

    Information Disclosure, Information Tampering and Denial of Service (DoS) Vulnerability in GENESIS64, ICONICS Suite, MC Works64, and GENESIS32

    Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electr…

    Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 GENESIS64 ICS / OT

Revision history

  1. #4

    Update C - Changed mitigation description and updated product tree

  2. #3

    Update B - Added GENESIS32.

  3. #2

    Update A - There are no plans to release a security update for MC Works64.

  4. #1

    Initial Publication

References