CVE-2022-33318: Critical severity ICONICS GENESIS64 vulnerability
Deserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows a remote unauthenticated attacker to execute an arbitrary malicious code by sending specially crafted packets to the GENESIS64 server.
Other sources
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior, and Mitsubishi Electric MC Works64 versions 4.04E and prior allows a remote unauthenticated attacker to execute an arbitrary malicious code by sending specially crafted packets to the GENESIS64, ICONICS Suite, GENESIS32, or MC Works64 server.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-33318?
The severity of CVE-2022-33318 is critical.
How does CVE-2022-33318 affect ICONICS GENESIS64?
CVE-2022-33318 affects ICONICS GENESIS64 versions 10.97.1 and prior.
How does CVE-2022-33318 affect Mitsubishi Electric MC Works64?
CVE-2022-33318 affects Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior.
How can an attacker exploit CVE-2022-33318?
An attacker can exploit CVE-2022-33318 by sending specially crafted packets to the GENESIS64 or MC Works64 system.
Is there a fix available for CVE-2022-33318?
Yes, patches and updates are available to fix CVE-2022-33318. Please refer to the vendor's advisory for more information.