https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-40264.htmlhttps://patchthecve.com/cve/CVE-2022-40264.htmlWed, 17 Jun 2026 05:01:11 +0000MEDIUM 6.3: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or destroy arbitrary files by getting a legitimate user import a project package fhttps://patchthecve.com/cve/CVE-2022-33320.htmlhttps://patchthecve.com/cve/CVE-2022-33320.htmlWed, 17 Jun 2026 04:49:06 +0000HIGH 7.8: Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions IChttps://patchthecve.com/cve/CVE-2022-33319.htmlhttps://patchthecve.com/cve/CVE-2022-33319.htmlWed, 17 Jun 2026 04:49:05 +0000HIGH 8.2: Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite verhttps://patchthecve.com/cve/CVE-2022-33318.htmlhttps://patchthecve.com/cve/CVE-2022-33318.htmlWed, 17 Jun 2026 04:49:05 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions IChttps://patchthecve.com/cve/CVE-2022-33317.htmlhttps://patchthecve.com/cve/CVE-2022-33317.htmlWed, 17 Jun 2026 04:49:05 +0000HIGH 7.8: Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconihttps://patchthecve.com/cve/CVE-2022-33316.htmlhttps://patchthecve.com/cve/CVE-2022-33316.htmlWed, 17 Jun 2026 04:49:05 +0000HIGH 7.8: Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions IChttps://patchthecve.com/cve/CVE-2022-33315.htmlhttps://patchthecve.com/cve/CVE-2022-33315.htmlWed, 17 Jun 2026 04:49:05 +0000HIGH 7.8: Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions IChttps://patchthecve.com/cve/CVE-2022-29834.htmlhttps://patchthecve.com/cve/CVE-2022-29834.htmlWed, 17 Jun 2026 04:40:47 +0000HIGH 7.5: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, andhttps://patchthecve.com/cve/CVE-2022-23130.htmlhttps://patchthecve.com/cve/CVE-2022-23130.htmlWed, 17 Jun 2026 04:29:33 +0000MEDIUM 5.9: Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi Electric ICONICS Suite versions 10.97 and prior, Mitsubishi Ehttps://patchthecve.com/cve/CVE-2022-23129.htmlhttps://patchthecve.com/cve/CVE-2022-23129.htmlWed, 17 Jun 2026 04:29:33 +0000MEDIUM 5.5: Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally. This is because when cohttps://patchthecve.com/cve/CVE-2022-23128.htmlhttps://patchthecve.com/cve/CVE-2022-23128.htmlWed, 17 Jun 2026 04:29:33 +0000CRITICAL 9.8: Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS AnalytiX versions 10.95.3 to 10.97 and ICONICS MobileHMIhttps://patchthecve.com/cve/CVE-2022-23127.htmlhttps://patchthecve.com/cve/CVE-2022-23127.htmlWed, 17 Jun 2026 04:29:33 +0000MEDIUM 6.1: Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64 or MobileHMI and perform any operation using the https://patchthecve.com/cve/CVE-2020-12015.htmlhttps://patchthecve.com/cve/CVE-2020-12015.htmlWed, 17 Jun 2026 02:51:15 +0000HIGH 7.5: A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 version 3.00A (9.https://patchthecve.com/cve/CVE-2020-12013.htmlhttps://patchthecve.com/cve/CVE-2020-12013.htmlWed, 17 Jun 2026 02:51:15 +0000CRITICAL 9.1: A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A (9.50.255.02); ICONICS GenBrokerhttps://patchthecve.com/cve/CVE-2020-12007.htmlhttps://patchthecve.com/cve/CVE-2020-12007.htmlWed, 17 Jun 2026 02:51:14 +0000CRITICAL 9.8: A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Elechttps://patchthecve.com/cve/CVE-2020-12009.htmlhttps://patchthecve.com/cve/CVE-2020-12009.htmlWed, 17 Jun 2026 02:51:14 +0000HIGH 7.5: A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A (9.https://patchthecve.com/cve/CVE-2020-12011.htmlhttps://patchthecve.com/cve/CVE-2020-12011.htmlWed, 17 Jun 2026 02:51:15 +0000CRITICAL 9.8: A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; MC Works32 version 3.00A (9.50.255.02); ICONICS G