Vendor
ICONICS
27 known vulnerabilities in products by ICONICS, 0 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-33318 | Mitsubishi Electric GENESIS64: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2020-12011 | Mitsubishi Electric MC Works64: Out-of-bounds Write | 9.8 | |
| Critical | CVE-2020-12007 | Mitsubishi Electric MC Works64: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2022-23128 | ICONICS Analytix: Authentication Bypass | 9.8 | |
| Critical | CVE-2020-12013 | Mitsubishi Electric MC Works64: Code Injection | 9.1 | |
| High | CVE-2020-12009 | Mitsubishi Electric MC Works64: Deserialization of Untrusted Data | 7.5 | |
| High | CVE-2016-2289 | ICONICS WebHMI 9: Path Traversal | 7.5 | |
| Critical | CVE-2022-33319 | Mitsubishi Electric GENESIS64: Out-of-bounds Read | 8.2 | |
| High | CVE-2020-12015 | Mitsubishi Electric MC Works64: Deserialization of Untrusted Data | 7.5 | |
| High | CVE-2021-27041 | Autodesk Design Review: Code Execution | 7.8 | |
| High | CVE-2022-29834 | Mitsubishi Electric GENESIS64: Path Traversal | 7.5 | |
| Not rated | CVE-2011-2089 | ICONICS BizViz: Stack-Based Buffer Overflow | — | |
| Medium | CVE-2022-23127 | ICONICS Mobilehmi: Cross-Site Scripting (XSS) | 6.1 | |
| Low | CVE-2021-27040 | Autodesk Advance Steel: Code Execution | 3.3 | |
| Not rated | CVE-2006-6488 | Iconics Dialog Wrapper Module ActiveX Control: Stack-Based Buffer Overflow | — | |
| Not rated | CVE-2011-5089 | ICONICS BizViz: Buffer Overflow | — | |
| Medium | CVE-2022-23130 | Mitsubishi Electric GENESIS64: Buffer Over-read | 5.9 | |
| Not rated | CVE-2011-5088 | ICONICS BizViz: Code Execution | — | |
| Not rated | CVE-2014-0758 | ICONICS GENESIS32 Exposed Dangerous Method or Function | — | |
| High | CVE-2022-33320 | Mitsubishi Electric GENESIS64: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2024-7587 | Mitsubishi Electric GENESIS64: Incorrect Default Permissions | 7.8 | |
| High | CVE-2022-33315 | Mitsubishi Electric GENESIS64: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2022-33316 | Mitsubishi Electric GENESIS64: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2022-33317 | Mitsubishi Electric GENESIS64: Inclusion of Functionality from Untrusted Control Sphere | 7.8 | |
| High | CVE-2022-40264 | ICONICS and Mitsubishi Electric GENESIS64: Path Traversal | 6.3 |