PatchTheCVEgenesis64 vulnerabilities and fixes
Recent CVEs affecting genesis64, with upgrade or downgrade steps. 16 tracked.
genesis64 has 16 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 15. Most recent: 2022-12-14. Highest priority: CVE-2022-33318 (score 64/100).
- CVE-2022-40264 MEDIUM 6.3 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsub
- CVE-2022-33320 HIGH 7.8 DOWNGRADE UPGRADE Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mi
- CVE-2022-33319 HIGH 8.2 DOWNGRADE UPGRADE Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electr
- CVE-2022-33318 CRITICAL 9.8 DOWNGRADE UPGRADE Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mi
- CVE-2022-33317 HIGH 7.8 DOWNGRADE UPGRADE Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versio
- CVE-2022-33316 HIGH 7.8 DOWNGRADE UPGRADE Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mi
- CVE-2022-33315 HIGH 7.8 DOWNGRADE UPGRADE Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mi
- CVE-2022-29834 HIGH 7.5 DOWNGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Ele
- CVE-2022-23130 MEDIUM 5.9 UPGRADE UPGRADE Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric
- CVE-2022-23129 MEDIUM 5.5 UPGRADE UPGRADE Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01)
- CVE-2022-23128 CRITICAL 9.8 UPGRADE UPGRADE Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201
- CVE-2020-12015 HIGH 7.5 UPGRADE DOWNGRADE A specially crafted communication packet sent to the affected systems could cause a denial-of-service conditio
- CVE-2020-12013 CRITICAL 9.1 DOWNGRADE UPGRADE A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL command
- CVE-2020-12011 CRITICAL 9.8 UPGRADE DOWNGRADE A specially crafted communication packet sent to the affected systems could cause a denial-of-service conditio
- CVE-2020-12009 HIGH 7.5 UPGRADE DOWNGRADE A specially crafted communication packet sent to the affected device could cause a denial-of-service condition
- CVE-2020-12007 CRITICAL 9.8 UPGRADE DOWNGRADE A specially crafted communication packet sent to the affected devices could allow remote code execution and a
FAQ
How do I fix genesis64 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is genesis64 being exploited right now?
None of the tracked genesis64 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which genesis64 CVE should I patch first?
CVE-2022-33318 currently ranks highest (64/100): Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mi.