As cited
Copy frozen at (site build).
vulnerabilities
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
Mitsubishi Electric released patches for multiple critical vulnerabilities across its GENESIS, ICONICS Suite, and related industrial control software products. The flaws include a heap-based buffer overflow from libwebp (CVE-2023-4863), weak password recovery mechanisms (CVE-2026-16436, CVE-2026-16437), and incorrect privilege assignment in DCOM permissions (CVE-2026-16438), each enabling remote code execution, authentication bypass, or system manipulation depending on the attack vector.
Why it matters: Organizations operating Mitsubishi Electric manufacturing automation and SCADA software must test and deploy patched versions (10.98 or later for most products, 11.04 for GENESIS) to block remote attackers from gaining control, tampering with processes, or causing denial-of-service in critical manufacturing environments; customers unable to patch immediately should isolate systems from untrusted networks and restrict administrative access.
- Source published
- First seen by Cybersecurity Tracker