CyberSecBulletin

Mitsubishi Electric Iconics Digital Solutions vulnerabilities

We track 18 vulnerabilities in Mitsubishi Electric Iconics Digital Solutions products across 9 products. 18 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.

18vulnerabilities
6critical
12high
0exploited
8.2average CVSS score

Latest Mitsubishi Electric Iconics Digital Solutions vulnerabilities

  • 9.4 Critical severity

    GENESIS64: Incorrect Privilege Assignment

    CVE-2026-16438Mitsubishi Electric

    Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC

  • 7.1 High severity

    GENESIS: Weak Password Recovery Mechanism for Forgotten Password

    CVE-2026-16437Mitsubishi Electric

    Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX

  • 9.2 Critical severity

    GENESIS: Weak Password Recovery Mechanism for Forgotten Password

    CVE-2026-16436Mitsubishi Electric

    Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX

  • 9.3 Critical severity

    GENESIS64: Cleartext Storage of Sensitive Information in GUI

    CVE-2025-14816Mitsubishi Electric

    Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Elec

  • 9.3 Critical severity

    GENESIS64: Cleartext Storage of Sensitive Information

    CVE-2025-14815Mitsubishi Electric

    Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hy

  • 8.2 High severity

    GENESIS64: Improper Neutralization of Special Elements used in an OS Command

    CVE-2025-11774Mitsubishi Electric

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad function") of Mitsubishi Electric GENESIS64 versions 10.97.2 CFR3 and prior, Mitsubis

  • 7.8 High severity

    GENESIS64: Uncontrolled Search Path Element

    CVE-2024-9852Mitsubishi Electric

    Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESI

  • 7.0 High severity

    GENESIS64: Dead Code

    CVE-2024-8300Mitsubishi Electric

    Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICONICS Suite

  • 7.8 High severity

    GENESIS64: Uncontrolled Search Path Element

    CVE-2024-8299Mitsubishi Electric

    Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESI

  • 7.8 High severity

    GENESIS64: Incorrect Default Permissions

    CVE-2024-7587Mitsubishi Electric

    Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electri

  • 7.0 High severity

    GENESIS64: Uncontrolled Search Path Element

    CVE-2024-1182Mitsubishi Electric Iconics Digital Solutions

    Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Wor

  • 7.8 High severity

    GENESIS64: Deserialization of Untrusted Data

    CVE-2022-33320Mitsubishi Electric

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis

  • 9.1 Critical severity

    GENESIS64: Out-of-bounds Read

    CVE-2022-33319Mitsubishi ElectricEPSS 1.72%

    Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Ico

  • 9.8 Critical severity

    GENESIS64: Deserialization of Untrusted Data

    CVE-2022-33318Mitsubishi ElectricEPSS 50.1%

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis

  • 7.8 High severity

    GENESIS64: Inclusion of Functionality from Untrusted Control Sphere

    CVE-2022-33317Mitsubishi Electric

    Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.

  • 7.8 High severity

    GENESIS64: Deserialization of Untrusted Data

    CVE-2022-33316Mitsubishi Electric

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis

  • 7.8 High severity

    GENESIS64: Deserialization of Untrusted Data

    CVE-2022-33315Mitsubishi Electric

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis

  • 7.5 High severity

    GENESIS64: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2022-29834Mitsubishi ElectricEPSS 1.71%

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICON