Skip to content
OpenAdvisories
Medium ICSA-25-217-01 1 CVE

Mitsubishi Electric Iconics Digital Solutions Multiple Products (Update B)

Published Aug 5, 2025 · Updated Apr 7, 2026 · Revision 3

Vendor: Mitsubishi Electric Vendor: Mitsubishi Electric Iconics Digital Solutions Product: AnalytiX Product: AnalytiX Product: GENESIS Product: GENESIS Product: GENESIS64 Product: GENESIS64 Product: Hyper Historian Product: Hyper Historian Product: ICONICS Suite Product: ICONICS Suite Product: IoTWorX Product: IoTWorX Product: MC Works 64 Product: MobileHMI Product: MobileHMI

Summary

Successful exploitation of this vulnerability could allow a local attacker to make an unauthorized write to arbitrary files, by creating a symbolic link from a file used as a write destination by the processes of the affected products to a target file. This could allow the attacker to destroy the file on a PC with the affected products installed, resulting in a denial-of-service (DoS) condition on the PC if the destroyed file is necessary for the operation of the PC.

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-7376

    Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS

    Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubis…

    Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 ICONICS Suite ICS / OT

Revision history

  1. #3

    Update B - Added MobileHMI, Hyper Historian, AnalytiX, and IoTWorX as affected products, and added information on affected versions and vendor fix for GENESIS64, GENESIS, MobileHMI, Hyper Historian, AnalytiX, and IoTWorX.

  2. #2

    Update A - Modified the vulnerability description in section 3.2.1 to clarify the privilege level required by the attacker, modified the company name in section 4.0 to Mitsubishi Electric Iconics Digital Solutions, and added a statement from Mitsubishi regarding a patched version of GENESIS64 that is in development.

  3. #1

    Initial Publication

References