Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions Hyper Historian versions 10.97.3 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS32 all versions allows a local authenticated attacker to execute a malicious code by storing a specially crafted DLL in a specific folder. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or to cause a denial of service (DoS) condition on the products.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
GENESIS64
Vendor
Mitsubishi Electric Corporation
Product
GENESIS64
Platforms
Unknown
Default status
unaffected
GENESIS64 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions 10.97.3 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
ICONICS Suite
Vendor
Mitsubishi Electric Corporation
Product
ICONICS Suite
Platforms
Unknown
Default status
unaffected
ICONICS Suite · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions 10.97.3 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
Hyper Historian
Vendor
Mitsubishi Electric Corporation
Product
Hyper Historian
Platforms
Unknown
Default status
unaffected
Hyper Historian · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions 10.97.3 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
GENESIS32
Vendor
Mitsubishi Electric Corporation
Product
GENESIS32
Platforms
Unknown
Default status
unaffected
GENESIS32 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MC Works64
Vendor
Mitsubishi Electric Corporation
Product
MC Works64
Platforms
Unknown
Default status
unaffected
MC Works64 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all versions
affected
Unavailable
Unavailable
Unavailable
None listed
GENESIS64
Vendor
Mitsubishi Electric Iconics Digital Solutions
Product
GENESIS64
Platforms
Unknown
Default status
unaffected
GENESIS64 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions 10.97.3 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
ICONICS Suite
Vendor
Mitsubishi Electric Iconics Digital Solutions
Product
ICONICS Suite
Platforms
Unknown
Default status
unaffected
ICONICS Suite · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions 10.97.3 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
Hyper Historian
Vendor
Mitsubishi Electric Iconics Digital Solutions
Product
Hyper Historian
Platforms
Unknown
Default status
unaffected
Hyper Historian · Scoped product and version facts