Skip to content
OpenAdvisories
High ICSA-26-097-01 2 CVEs

Mitsubishi Electric GENESIS64 and ICONICS Suite products

Published Apr 7, 2026 · Updated Apr 7, 2026 · Revision 2

Vendor: Mitsubishi Electric Vendor: Mitsubishi Electric Iconics Digital Solutions Product: AnalytiX Product: AnalytiX Product: GENESIS Product: GENESIS Product: GENESIS64 Product: GENESIS64 Product: Hyper Historian Product: Hyper Historian Product: ICONICS Suite Product: ICONICS Suite Product: MC Works 64 Product: MobileHMI Product: MobileHMI

Summary

Successful exploitation of these vulnerabilities could allow a local attacker to disclose SQL Server credentials used by the affected products and use them to disclose, tamper with, or destroy data, or to cause a denial-of-service (DoS) condition on the system.

Vulnerabilities 2

  • Critical 9.3
    CVE-2025-14815

    Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64

    Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric H…

    Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 ICONICS Suite ICS / OT
  • Critical 9.3
    CVE-2025-14816

    Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64

    Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Ele…

    Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 ICONICS Suite ICS / OT

Revision history

  1. #2

    Initial CISA Republication of Mitsubishi Electric V20251021-001, V20251029-001 advisory

  2. #1

    Initial Publication

References