Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior
Críticas / altas1415▲ 65 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
42 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 0.46% | — | Iconics Genesis64Mitsubishielectric MC Works64 | 20/7/2022 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite… | |
| Modificada | Crítica (9.1) | 1.7% | — | Iconics Genesis64Mitsubishielectric MC Works64 | 20/7/2022 | 17/6/2026 | Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to… | |
| Modificada | Crítica (9.8) | 50% | — | Iconics Genesis64Mitsubishielectric MC Works64 | 20/7/2022 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite… | |
| Modificada | Alta (7.8) | 0.32% | — | Iconics Genesis64Mitsubishielectric MC Works64 | 20/7/2022 | 17/6/2026 | Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital… | |
| Modificada | Alta (7.8) | 0.33% | — | Iconics Genesis64Mitsubishielectric MC Works64 | 20/7/2022 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite… | |
| Modificada | Alta (7.8) | 0.33% | — | Iconics Genesis64Mitsubishielectric MC Works64 | 20/7/2022 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite… | |
| Modificada | Alta (7.5) | 1.7% | — | Iconics Genesis64 | 20/7/2022 | 17/6/2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi… | |
| Modificada | Media (5.5) | 1.0% | — | Iconics Genesis64Iconics Hyper HistorianMitsubishielectric MC Works64 | 21/1/2022 | 17/6/2026 | Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi Electric ICONICS Suite versions 10.97 and prior, Mitsubishi Electric Iconics… | |
| Modificada | Media (5.5) | 0.19% | — | Iconics Genesis64Mitsubishielectric MC Works64 | 21/1/2022 | 17/6/2026 | Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally. This is because when configuration… | |
| Modificada | Crítica (9.8) | 2.9% | — | Iconics AnalytixIconics Genesis64Iconics Hyper HistorianIconics Mobilehmi+1 | 21/1/2022 | 17/6/2026 | Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS AnalytiX versions 10.95.3 to 10.97 and ICONICS MobileHMI versions 10.95.3… | |
| Modificada | Alta (7.8) | 1.7% | — | Autodesk Advance SteelAutodesk AutocadAutodesk Autocad ArchitectureAutodesk Autocad Electrical+9 | 25/6/2021 | 17/6/2026 | A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code | |
| Modificada | Baja (3.3) | 2.7% | — | Autodesk Advance SteelAutodesk AutocadAutodesk Autocad ArchitectureAutodesk Autocad Electrical+9 | 25/6/2021 | 17/6/2026 | A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code. | |
| Modificada | Alta (7.5) | 2.0% | — | Mitsubishielectric MC WorksMitsubishielectric MC Works32Iconics Energy AnalytixIconics Facility Analytix+7 | 16/7/2020 | 17/6/2026 | A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 version 3.00A (9.50.255.02); ICONICS… | |
| Modificada | Crítica (9.1) | 3.0% | — | Mitsubishielectric MC Works32Mitsubishielectric MC Works64Iconics Energy AnalytixIconics Facility Analytix+7 | 16/7/2020 | 17/6/2026 | A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform… | |
| Modificada | Crítica (9.8) | 3.9% | — | Mitsubishielectric MC WorksMitsubishielectric MC Works32Iconics Energy AnalytixIconics Facility Analytix+7 | 16/7/2020 | 17/6/2026 | A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32… | |
| Modificada | Alta (7.5) | 3.6% | — | Mitsubishielectric MC WorksMitsubishielectric MC Works32Iconics Energy AnalytixIconics Facility Analytix+7 | 16/7/2020 | 17/6/2026 | A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A (9.50.255.02); ICONICS… | |
| Modificada | Crítica (9.8) | 29% | — | Mitsubishielectric MC WorksMitsubishielectric MC Works32Iconics Energy AnalytixIconics Facility Analytix+7 | 16/7/2020 | 17/6/2026 | A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64,… |