Vulnetix
Try Vulnetix Request Demo
CVE-2024-1573 PUBLISHED CVSS 5.900000095367432 MEDIUM

Improper Authentication vulnerability in the mobile monitoring feature of ICONICS GENESIS64 versions 10.97 to 10.97.2, Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.2 and Mitsubishi Electric MC Works64 all versions allows a remote unauthenticated attacker to bypass proper authentication and log in to the system when all of the following conditions are met: * Active Directory is used in the security setting. * “Automatic log in” option is enabled in the security setting. * The IcoAnyGlass IIS Application Pool is running under an Active Directory Domain Account. * The IcoAnyGlass IIS Application Pool account is included in GENESIS64TM and MC Works64 Security and has permission to log in.

EPSS 0.24% · 47.4th percentile

Risk Scores

CVSS v3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.24%
47.4th percentile

Affected Products

VendorProductVersions
Mitsubishi Electric CorporationICONICS Suiteversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric Iconics Digital SolutionsMobileHMIversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric CorporationAnalytiXversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
mitsubishielectricmc_works640, 0, 0
Mitsubishi Electric CorporationHyper Historianversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric CorporationGENESIS64versions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric CorporationMobileHMIversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric CorporationMC Works64all versions, all versions, all versions
Mitsubishi Electric Iconics Digital SolutionsHyper Historianversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric Iconics Digital SolutionsICONICS Suiteversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
iconicsgenesis6410.97, 10.97, 10.97
Mitsubishi Electric Iconics Digital SolutionsIoTWorXversion 10.95, version 10.95, version 10.95
Mitsubishi Electric Iconics Digital SolutionsGENESIS64versions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric Iconics Digital SolutionsAnalytiXversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric CorporationIoTWorXversion 10.95, version 10.95, version 10.95

Timeline

References

Open in Interactive Console →