ICONICS Suite vulnerabilities

18 known vulnerabilities in ICONICS Suite from Mitsubishi Electric Iconics Digital Solutions. 18 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

18vulnerabilities

6critical

12high

0exploited

8.2average CVSS score

Latest first

9.4 Critical severity
GENESIS64: Incorrect Privilege Assignment
CVE-2026-16438Oct 15, 2026Mitsubishi Electric
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC
7.1 High severity
GENESIS: Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-16437Oct 15, 2026Mitsubishi Electric
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX
9.2 Critical severity
GENESIS: Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-16436Oct 15, 2026Mitsubishi Electric
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX
9.3 Critical severity
GENESIS64: Cleartext Storage of Sensitive Information in GUI
CVE-2025-14816Apr 8, 2026Mitsubishi Electric
Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Elec
9.3 Critical severity
GENESIS64: Cleartext Storage of Sensitive Information
CVE-2025-14815Apr 8, 2026Mitsubishi Electric
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hy
8.2 High severity
GENESIS64: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-11774Dec 19, 2025Mitsubishi Electric
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad function") of Mitsubishi Electric GENESIS64 versions 10.97.2 CFR3 and prior, Mitsubis
7.8 High severity
GENESIS64: Uncontrolled Search Path Element
CVE-2024-9852Nov 28, 2024Mitsubishi Electric
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESI
7.0 High severity
GENESIS64: Dead Code
CVE-2024-8300Nov 28, 2024Mitsubishi Electric
Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICONICS Suite
7.8 High severity
GENESIS64: Uncontrolled Search Path Element
CVE-2024-8299Nov 28, 2024Mitsubishi Electric
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESI
7.8 High severity
GENESIS64: Incorrect Default Permissions
CVE-2024-7587Oct 22, 2024Mitsubishi Electric
Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electri
7.0 High severity
GENESIS64: Uncontrolled Search Path Element
CVE-2024-1182Jul 4, 2024Mitsubishi Electric Iconics Digital Solutions
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Wor
7.8 High severity
GENESIS64: Deserialization of Untrusted Data
CVE-2022-33320Jul 20, 2022Mitsubishi Electric
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis
9.1 Critical severity
GENESIS64: Out-of-bounds Read
CVE-2022-33319Jul 20, 2022Mitsubishi ElectricEPSS 1.72%
Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Ico
9.8 Critical severity
GENESIS64: Deserialization of Untrusted Data
CVE-2022-33318Jul 20, 2022Mitsubishi ElectricEPSS 50.1%
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis
7.8 High severity
GENESIS64: Inclusion of Functionality from Untrusted Control Sphere
CVE-2022-33317Jul 20, 2022Mitsubishi Electric
Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.
7.8 High severity
GENESIS64: Deserialization of Untrusted Data
CVE-2022-33316Jul 20, 2022Mitsubishi Electric
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis
7.8 High severity
GENESIS64: Deserialization of Untrusted Data
CVE-2022-33315Jul 20, 2022Mitsubishi Electric
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis
7.5 High severity
GENESIS64: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-29834Jul 20, 2022Mitsubishi ElectricEPSS 1.71%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICON