Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
Summary
Multiple vulnerabilities have been identified in Mitsubishi Electric's GENESIS and related software suites, including GENESIS64, ICONICS Suite, and others. Exploitation could lead to arbitrary code execution, authentication bypass, and denial-of-service conditions.
IFF Assessment
The identified vulnerabilities allow for significant impact on industrial control systems, including code execution and denial of service, posing a direct threat to operational integrity.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: October 04, 2023. Known ransomware use: Unknown.
Defender Context
Defenders in critical manufacturing sectors should prioritize patching these vulnerabilities in Mitsubishi Electric's industrial control systems. The potential for arbitrary code execution and denial of service in these environments poses a significant risk to operational continuity and safety.