CVE-2024-7587
Mitsubishi Electric ICONICS GENESIS64 vulnerability analysis and mitigation

Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for ICONICS GENESIS64 version 10.97.3 and prior, Mitsubishi Electric GENESIS64 version 10.97.3 and prior and Mitsubishi Electric MC Works64 all versions allows a local authenticated attacker to disclose or tamper with confidential information and data contained in the products, or cause a denial of service (DoS) condition on the products, by accessing a folder with incorrect permissions, when GenBroker32 is installed on the same PC as GENESIS64 or MC Works64.


SourceNVD

Related Mitsubishi Electric ICONICS GENESIS64 vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2024-7587HIGH7.8
  • Mitsubishi Electric ICONICS GENESIS64Mitsubishi Electric ICONICS GENESIS64
  • cpe:2.3:a:iconics:genesis64
NoNoOct 22, 2024
CVE-2022-40264HIGH7.1
  • Mitsubishi Electric ICONICS GENESIS64Mitsubishi Electric ICONICS GENESIS64
  • cpe:2.3:a:iconics:genesis64
NoNoDec 14, 2022
CVE-2024-8300HIGH7
  • Mitsubishi Electric ICONICS GENESIS64Mitsubishi Electric ICONICS GENESIS64
  • cpe:2.3:a:iconics:genesis64
NoNoNov 28, 2024
CVE-2024-1574MEDIUM6.7
  • Mitsubishi Electric ICONICS GENESIS64Mitsubishi Electric ICONICS GENESIS64
  • cpe:2.3:a:iconics:genesis64
NoNoJul 04, 2024
CVE-2024-1573MEDIUM5.9
  • Mitsubishi Electric ICONICS GENESIS64Mitsubishi Electric ICONICS GENESIS64
  • cpe:2.3:a:iconics:genesis64
NoNoJul 04, 2024

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management