Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)
Successful exploitation of this vulnerability could result in disclosure of confidential information, data tampering, or a denial-of-service condition.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-7587US | high7.8OT elevated | — | ||
Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Ic… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-296-01 JSONself
- ICSA Advisory ICSA-24-296-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (26)
- MitigationAnalytiX
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationAnalytiX
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationGENESIS32
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationGENESIS32
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationGENESIS64
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationGENESIS64
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationHyper Historian
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationHyper Historian
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationICONICS Suite
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationICONICS Suite
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationMC Works64
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationMobileHMI
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- MitigationMobileHMI
Verify that the permissions on the C:\ProgramData\ICONICS folder do not include "Everyone". If the folder includes "Everyone" permission, manually remove "Everyone" from the folder permissions for the C:\ProgramData\ICONICS folder and all folders under it.
- No fix plannedGENESIS32
For GENESIS32 users, no security patches or fixed versions will be released. Version 9 products have reached the retired stage of the product lifecycle. As outlined in the policy, these versions are no longer monitored for security vulnerabilities and will not receive fixes or patches. Refer to the product lifecycle policy for full details: https://iconics.com/en-us/Lifecycle-Policy .
https://iconics.com/en-us/Lifecycle-Policy - No fix plannedGENESIS32
For GENESIS32 users, no security patches or fixed versions will be released. Version 9 products have reached the retired stage of the product lifecycle. As outlined in the policy, these versions are no longer monitored for security vulnerabilities and will not receive fixes or patches. Refer to the product lifecycle policy for full details: https://iconics.com/en-us/Lifecycle-Policy .
https://iconics.com/en-us/Lifecycle-Policy - No fix plannedMC Works64
There are no plans to release a security update for MC Works64. Users of MC Works64 should refer to the Mitsubishi Electric security advisory and take the recommended actions outlined in the advisory. The most recent version is available at: https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-008_en.pdf .
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-008_en.pdf - FixedAnalytiX
Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI: Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric are releasing security updates for GENESIS64 and ICONICS Suite as critical fixes and rollup releases. For more information on these security updates, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The most recent version is available at: https://iconicsinc.my.site.com/community/s/login/ .
https://iconicsinc.my.site.com/community/s/login/ - FixedAnalytiX
Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI: Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric are releasing security updates for GENESIS64 and ICONICS Suite as critical fixes and rollup releases. For more information on these security updates, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The most recent version is available at: https://iconicsinc.my.site.com/community/s/login/ .
https://iconicsinc.my.site.com/community/s/login/ - FixedGENESIS64
Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI: Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric are releasing security updates for GENESIS64 and ICONICS Suite as critical fixes and rollup releases. For more information on these security updates, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The most recent version is available at: https://iconicsinc.my.site.com/community/s/login/ .
https://iconicsinc.my.site.com/community/s/login/ - FixedGENESIS64
Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI: Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric are releasing security updates for GENESIS64 and ICONICS Suite as critical fixes and rollup releases. For more information on these security updates, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The most recent version is available at: https://iconicsinc.my.site.com/community/s/login/ .
https://iconicsinc.my.site.com/community/s/login/ - FixedHyper Historian
Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI: Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric are releasing security updates for GENESIS64 and ICONICS Suite as critical fixes and rollup releases. For more information on these security updates, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The most recent version is available at: https://iconicsinc.my.site.com/community/s/login/ .
https://iconicsinc.my.site.com/community/s/login/ - FixedHyper Historian
Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI: Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric are releasing security updates for GENESIS64 and ICONICS Suite as critical fixes and rollup releases. For more information on these security updates, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The most recent version is available at: https://iconicsinc.my.site.com/community/s/login/ .
https://iconicsinc.my.site.com/community/s/login/ - FixedICONICS Suite
Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI: Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric are releasing security updates for GENESIS64 and ICONICS Suite as critical fixes and rollup releases. For more information on these security updates, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The most recent version is available at: https://iconicsinc.my.site.com/community/s/login/ .
https://iconicsinc.my.site.com/community/s/login/ - FixedICONICS Suite
Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI: Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric are releasing security updates for GENESIS64 and ICONICS Suite as critical fixes and rollup releases. For more information on these security updates, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The most recent version is available at: https://iconicsinc.my.site.com/community/s/login/ .
https://iconicsinc.my.site.com/community/s/login/ - FixedMobileHMI
Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI: Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric are releasing security updates for GENESIS64 and ICONICS Suite as critical fixes and rollup releases. For more information on these security updates, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The most recent version is available at: https://iconicsinc.my.site.com/community/s/login/ .
https://iconicsinc.my.site.com/community/s/login/ - FixedMobileHMI
Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI: Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric are releasing security updates for GENESIS64 and ICONICS Suite as critical fixes and rollup releases. For more information on these security updates, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The most recent version is available at: https://iconicsinc.my.site.com/community/s/login/ .
https://iconicsinc.my.site.com/community/s/login/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan