MC Works64 vulnerabilities

18 known vulnerabilities in MC Works64 from Mitsubishi Electric. 18 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  GENESIS64: Incorrect Privilege Assignment

  CVE-2026-16438Oct 15, 2026Mitsubishi Electric

  Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC

• 7.1 High severity

  GENESIS: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2026-16437Oct 15, 2026Mitsubishi Electric

  Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX

• 9.2 Critical severity

  GENESIS: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2026-16436Oct 15, 2026Mitsubishi Electric

  Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX

• 9.3 Critical severity

  GENESIS64: Cleartext Storage of Sensitive Information in GUI

  CVE-2025-14816Apr 8, 2026Mitsubishi Electric

  Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Elec

• 9.3 Critical severity

  GENESIS64: Cleartext Storage of Sensitive Information

  CVE-2025-14815Apr 8, 2026Mitsubishi Electric

  Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hy

• 8.2 High severity

  GENESIS64: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-11774Dec 19, 2025Mitsubishi Electric

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad function") of Mitsubishi Electric GENESIS64 versions 10.97.2 CFR3 and prior, Mitsubis

• 7.8 High severity

  GENESIS64: Uncontrolled Search Path Element

  CVE-2024-9852Nov 28, 2024Mitsubishi Electric

  Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESI

• 7.8 High severity

  GENESIS64: Uncontrolled Search Path Element

  CVE-2024-8299Nov 28, 2024Mitsubishi Electric

  Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESI

• 7.8 High severity

  GENESIS64: Incorrect Default Permissions

  CVE-2024-7587Oct 22, 2024Mitsubishi Electric

  Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electri

• 7.0 High severity

  GENESIS64: Uncontrolled Search Path Element

  CVE-2024-1182Jul 4, 2024Mitsubishi Electric Iconics Digital Solutions

  Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Wor

• 9.8 Critical severity

  EZSocket: Use of Externally-Controlled Input to Select Classes or Code

  CVE-2023-6943Jan 30, 2024Mitsubishi ElectricEPSS 2.13%

  Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions

• 7.5 High severity

  EZSocket: Missing Authentication for Critical Functionality

  CVE-2023-6942Jan 30, 2024Mitsubishi Electric

  Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions

• 7.8 High severity

  GENESIS64: Deserialization of Untrusted Data

  CVE-2022-33320Jul 20, 2022Mitsubishi Electric

  Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis

• 9.1 Critical severity

  GENESIS64: Out-of-bounds Read

  CVE-2022-33319Jul 20, 2022Mitsubishi ElectricEPSS 1.72%

  Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Ico

• 9.8 Critical severity

  GENESIS64: Deserialization of Untrusted Data

  CVE-2022-33318Jul 20, 2022Mitsubishi ElectricEPSS 50.1%

  Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis

• 7.8 High severity

  GENESIS64: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2022-33317Jul 20, 2022Mitsubishi Electric

  Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.

• 7.8 High severity

  GENESIS64: Deserialization of Untrusted Data

  CVE-2022-33316Jul 20, 2022Mitsubishi Electric

  Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis

• 7.8 High severity

  GENESIS64: Deserialization of Untrusted Data

  CVE-2022-33315Jul 20, 2022Mitsubishi Electric

  Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubis