ICONICS Alert
2575Warning Date
Severity Level
Warning Number
Target Sector
25 July, 2022
● High
2022-5060
All
Description:
Mitsubishi Electric, ICONICS has released a security update to address multiple vulnerabilities in the following products:
- ICONICS GENESIS64: Version 10.97.1 and prior
- ICONICS Hyper Historian: Version 10.97.1 and prior
- ICONICS AnalytiX: Version 10.97.1 and prior
- ICONICS IoTWorX: Versions 10.97 and 10.97.1
- ICONICS MobileHMI: Versions 10.97 and 10.97.1
- ICONICS GraphWorX64: Version 10.97.1 and prior
- ICONICS GenBrokerX64: Version 10.97.1 and prior
- Mitsubishi Electric MC Works64: Version 4.04E and prior (v10.95.210.01), excluding CVE-2022-29384
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary code –remotely-
Best practice and Recommendations:
The CERT team encourages users to review Mitsubishi Electric, ICONICS security advisory and apply the necessary updates: