Mitsubishi Electric Corporation Vulnerabilities and Affected Products
Vulnerabilities associated with IoTWorX.
Products
Clear product- GX Works316 vulnerabilities
- GENESIS6413 vulnerabilities
- ICONICS Suite13 vulnerabilities
- MC Works6412 vulnerabilities
- MELSEC iQ-F Series FX5U-32MR/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-32MR/ES11 vulnerabilities
- MELSEC iQ-F Series FX5U-32MT/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-32MT/DSS11 vulnerabilities
- MELSEC iQ-F Series FX5U-32MT/ES11 vulnerabilities
- MELSEC iQ-F Series FX5U-32MT/ESS11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MR/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MR/ES11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MT/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MT/DSS11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MT/ES11 vulnerabilities
- MELSEC iQ-F Series FX5U-64MT/ESS11 vulnerabilities
- MELSEC iQ-F Series FX5U-80MR/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-80MR/ES11 vulnerabilities
- MELSEC iQ-F Series FX5U-80MT/DS11 vulnerabilities
- MELSEC iQ-F Series FX5U-80MT/DSS11 vulnerabilities
- MELSEC iQ-F Series FX5U-80MT/ESS11 vulnerabilities
- MELSEC iQ-F Series FX5UC-32MR/DS-TS11 vulnerabilities
- MELSEC iQ-F Series FX5UC-32MT/D11 vulnerabilities
- MELSEC iQ-F Series FX5UC-32MT/DS-TS11 vulnerabilities
- MELSEC iQ-F Series FX5UC-32MT/DSS11 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-7376MEDIUM | Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESISWindows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric AnalytiX versions 10.97.3 and prior, Mitsubishi Electric IoTWorX version 10.95, Mitsubishi Electric GENESIS version 11.00, Mitsubishi Electric MC Works64 all version… CWE-64Aug 6, 2025 | CVSS5.9v3.1 | EPSS0.192% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-0921MEDIUM | Information Tampering Vulnerability in Multiple Services of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, GENESIS, GENESIS32, and BizVizExecution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric AnalytiX versions 10.97.3 and prior, Mitsubishi Electric IoTWorX version 10.95, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric BizViz all version… CWE-250May 15, 2025 | CVSS6.5v3.1 | EPSS0.203% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-1573MEDIUM | Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 and prior, Mitsubishi Electric AnalytiX versions 10.97.2 and prior, Mitsubishi Electric MobileHMI versions 10.97.2 and prior, Mitsubishi Electric IoTWorX version 10.95, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electri… | CVSS5.9v3.1 | EPSS0.593% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |