Mitsubishi Electric Corporation Vulnerabilities and Affected Products
Vulnerabilities associated with GENESIS.
Products
Clear product- GX Works316 vulnerabilities
- GENESIS6413 vulnerabilities
- ICONICS Suite13 vulnerabilities
- MC Works6412 vulnerabilities
- MELSEC iQ-F Series FX5U-32MR/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-32MR/ES11 vulnerabilities
- MELSEC iQ-F Series FX5U-32MT/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-32MT/DSS11 vulnerabilities
- MELSEC iQ-F Series FX5U-32MT/ES11 vulnerabilities
- MELSEC iQ-F Series FX5U-32MT/ESS11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MR/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MR/ES11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MT/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MT/DSS11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MT/ES11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MT/ESS11 vulnerabilities
- MELSEC iQ-F Series FX5U-80MR/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-80MR/ES11 vulnerabilities
- MELSEC iQ-F Series FX5U-80MT/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-80MT/DSS11 vulnerabilities
- MELSEC iQ-F Series FX5U-80MT/ESS11 vulnerabilities
- MELSEC iQ-F Series FX5UC-32MR/DS-TS11 vulnerabilities
- MELSEC iQ-F Series FX5UC-32MT/D11 vulnerabilities
- MELSEC iQ-F Series FX5UC-32MT/DS-TS11 vulnerabilities
- MELSEC iQ-F Series FX5UC-32MT/DSS11 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-14816CRITICAL | Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric AnalytiX versions 10.97.3 and prior, Mitsubishi Electric GENESIS versions 11.02 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric Iconics Digital… CWE-317Apr 8, 2026 | CVSS9.3v4.0 | EPSS0.101% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-14815CRITICAL | Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric AnalytiX versions 10.97.3 and prior, Mitsubishi Electric GENESIS versions 11.02 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric Iconics Digital Soluti… CWE-312Apr 8, 2026 | CVSS9.3v4.0 | EPSS0.101% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-7376MEDIUM | Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESISWindows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric AnalytiX versions 10.97.3 and prior, Mitsubishi Electric IoTWorX version 10.95, Mitsubishi Electric GENESIS version 11.00, Mitsubishi Electric MC Works64 all version… CWE-64Aug 6, 2025 | CVSS5.9v3.1 | EPSS0.192% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-0921MEDIUM | Information Tampering Vulnerability in Multiple Services of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, GENESIS, GENESIS32, and BizVizExecution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric AnalytiX versions 10.97.3 and prior, Mitsubishi Electric IoTWorX version 10.95, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric BizViz all version… CWE-250May 15, 2025 | CVSS6.5v3.1 | EPSS0.203% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |