Mitsubishi Electric GENESIS64 DCOM flaw can expose or destroy data
An attacker logged in as the product administrator can run DCOM objects locally or remotely; fixed builds are 10.98 or later.
45
Vendor
Mitsubishi Electric
- Mentions · 7d1
- Mentions · 30d1
- All mentions8
- First seenAug 13, 2026
- Last mentioned4d ago
Timeline
8 articles · newest firstMitsubishi Electric GX Works3 and Motion Control Settings
CISA warns CVE-2026-15688 lets a local attacker bypass block password authentication in Mitsubishi Electric GX Works3 and tamper with control programs.
35
Mitsubishi Electric CC-Link IE TSN Communication Protocol (Update A)
CISA updated its CC-Link IE TSN advisory: segment-attached attackers can tamper with Mitsubishi Electric control data and trigger denial of service conditions.
42
Mitsubishi Electric Multiple FA Products (Update D)
CISA warns Mitsubishi Electric CC-Link IE TSN remote I/O modules are vulnerable to denial-of-service via crafted UDP packets (CVE-2025-3511).
20
Mitsubishi Electric CNC Series (Update A)
CISA's updated ICS advisory details CVE-2025-2399, an out-of-bounds read in Mitsubishi Electric CNC series that lets a remote attacker cause a denial-of-service condition.
22
Multiple Vulnerabilities Discovered in a SCADA System
Unit 42 details five vulnerabilities (CVSS 7.0-7.8) in ICONICS Suite SCADA software enabling privilege escalation and DoS.
52
Privileged File System Vulnerability Present in a SCADA System
Unit 42 details CVE-2025-0921 (CVSS 6.5), a privileged file operations flaw in Iconics Suite enabling DoS and privilege escalation.
38
New Mirai variant adds stealth capabilities to notorious botnet code
FortiGuard Labs reports new Mirai-derived botnet Evooo1Bot actively exploits unpatched routers and edge devices, adding encrypted C2, stealthy SSH scanning, and proxying.
60
Related CVEs
by mentions- CVE-2024-7587<1%7.8Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior…
- Block password bypass in Mitsubishi Electric GX Works3 and Motion Control Setting
- CVE-2024-9852<1%7.8Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3…
- CVE-2024-8299<1%7.8Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3…
- CVE-2025-3511<1%7.5Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN…
- CVE-2024-1182<1%7.0Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3…
- CVE-2024-8300<1%7.0Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions…
- CVE-2025-0921<1%6.5Execution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric…
- CVE-2025-2399<1%5.9Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric CNC M800V Series M800VW and M800VS, M80V Series M80V…
Appears with
- CISAorganization · 4
- GENESIS64product · 3
- ICONICS Suiteproduct · 3
- Palo Alto Networksvendor · 2
- MC Works64product · 2
- Unit 42vendor · 2
- CISAvendor · 2
- Mitsubishi Electricorganization · 2
- ICONICSvendor · 2
- Motion Control Settingsproduct · 1
- RJ71GN11product · 1
- FortiGuard Labsorganization · 1
- MobileHMIproduct · 1
- Netgearvendor · 1
- Mitsubishi Electric Iconics Digital Solutionsvendor · 1
- CC-Link IE TSN Remote I/O moduleproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.