VDB

CVE-2024-1574

CVE-2024-1574 PUBLISHED CVSS 6.699999809265137 MEDIUM

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing feature of ICONICS GENESIS64 versions 10.97 to 10.97.2, Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.2 and Mitsubishi Electric MC Works64 all versions allows a local attacker to execute a malicious code with administrative privileges by tampering with a specific file that is not protected by the system.

EPSS 0.13% · 32.4th percentile

Risk Scores

CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.13%
32.4th percentile

Affected Products

VendorProductVersions
Mitsubishi Electric CorporationMC Works64all versions, *, all versions
Mitsubishi Electric CorporationGENESIS32versions 9.7 and prior, versions 9.7 and prior, versions 9.7 and prior
Mitsubishi Electric CorporationMobileHMIversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric Iconics Digital SolutionsGENESIS64*, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric CorporationBizVizversions 9.7 and prior, versions 9.7 and prior, versions 9.7 and prior
Mitsubishi Electric Iconics Digital SolutionsGENESIS32versions 9.7 and prior, *, versions 9.7 and prior
mitsubishielectricmc_works640, 0, 0
iconicsgenesis6410.97, 10.97, 10.97
Mitsubishi Electric Iconics Digital SolutionsHyper Historianversions 10.97.2 and prior, *, *
Mitsubishi Electric CorporationAnalytiX*, *, versions 10.97.2 and prior
Mitsubishi Electric Iconics Digital SolutionsMobileHMIversions 10.97.2 and prior, *, versions 10.97.2 and prior
Mitsubishi Electric Iconics Digital SolutionsAnalytiXversions 10.97.2 and prior, versions 10.97.2 and prior, *
Mitsubishi Electric Iconics Digital SolutionsICONICS Suiteversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric CorporationHyper Historianversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric CorporationGENESIS64versions 10.97.2 and prior, *, versions 10.97.2 and prior
Mitsubishi Electric CorporationICONICS Suiteversions 10.97.2 and prior, versions 10.97.2 and prior, versions 10.97.2 and prior
Mitsubishi Electric Iconics Digital SolutionsBizVizversions 9.7 and prior, versions 9.7 and prior, versions 9.7 and prior

Exploit Intelligence

Timeline

  • Jul 4, 2024 CVE Published
  • Jul 5, 2024 EPSS Score
  • Jul 27, 2024 EPSS Score
  • Aug 22, 2024 EPSS Score
  • Sep 13, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 5, 2024 EPSS Score
  • Oct 27, 2024 EPSS Score
  • Nov 18, 2024 EPSS Score
  • Dec 11, 2024 EPSS Score
  • Jan 2, 2025 EPSS Score
  • Jan 24, 2025 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›