PatchTheCVEiconics vulnerabilities
Recent CVEs affecting iconics products. 12 tracked.
iconics has 12 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 11. Most recent: 2022-12-14. Highest priority: CVE-2022-33318 (score 64/100).
- CVE-2022-40264 MEDIUM 6.3 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsub
- CVE-2022-33320 HIGH 7.8 DOWNGRADE UPGRADE Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mi
- CVE-2022-33319 HIGH 8.2 DOWNGRADE UPGRADE Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electr
- CVE-2022-33318 CRITICAL 9.8 DOWNGRADE UPGRADE Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mi
- CVE-2022-33317 HIGH 7.8 DOWNGRADE UPGRADE Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versio
- CVE-2022-33316 HIGH 7.8 DOWNGRADE UPGRADE Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mi
- CVE-2022-33315 HIGH 7.8 DOWNGRADE UPGRADE Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mi
- CVE-2022-29834 HIGH 7.5 DOWNGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Ele
- CVE-2022-23130 MEDIUM 5.9 UPGRADE UPGRADE Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric
- CVE-2022-23129 MEDIUM 5.5 UPGRADE UPGRADE Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01)
- CVE-2022-23128 CRITICAL 9.8 UPGRADE UPGRADE Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201
- CVE-2022-23127 MEDIUM 6.1 UPGRADE UPGRADE Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior a
FAQ
How do I fix iconics vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is iconics being exploited right now?
None of the tracked iconics CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which iconics CVE should I patch first?
CVE-2022-33318 currently ranks highest (64/100): Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mi.