Mitsubishielectric

Mc Works64

18 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2022-33315

  • EPSS 0.11%
  • Veröffentlicht 20.07.2022 17:15:08
  • Zuletzt bearbeitet 09.01.2026 05:15:51

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1...

5.5

CVE-2022-23130

  • EPSS 0.06%
  • Veröffentlicht 21.01.2022 19:15:10
  • Zuletzt bearbeitet 08.01.2026 12:15:44

Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi Electric IC...

5.5

CVE-2022-23129

  • EPSS 0.07%
  • Veröffentlicht 21.01.2022 19:15:10
  • Zuletzt bearbeitet 21.11.2024 06:48:03

Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to acce...

9.8

CVE-2022-23128

  • EPSS 3.77%
  • Veröffentlicht 21.01.2022 19:15:09
  • Zuletzt bearbeitet 21.11.2024 06:48:03

Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS Analyt...

6.1

CVE-2022-23127

  • EPSS 0.3%
  • Veröffentlicht 21.01.2022 19:15:09
  • Zuletzt bearbeitet 21.11.2024 06:48:03

Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64...

7.8

CVE-2021-27041

  • EPSS 0.37%
  • Veröffentlicht 25.06.2021 13:15:08
  • Zuletzt bearbeitet 21.11.2024 05:57:14

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code

4.3

CVE-2021-27040

  • EPSS 0.33%
  • Veröffentlicht 25.06.2021 13:15:08
  • Zuletzt bearbeitet 21.11.2024 05:57:13

A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.

9.1

CVE-2020-12013

  • EPSS 0.91%
  • Veröffentlicht 16.07.2020 22:15:11
  • Zuletzt bearbeitet 21.11.2024 04:59:06

A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Work...