CVE-2024-1182

highpriority · track · 0EPSS 0.003 · 17 %ileEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.26% (17th) EPSS
CVSS 7 · high
Is it mine?
23 products
Check your exposure
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · scored 2026-10-23

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions Hyper Historian versions 10.97.3 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior allows a local attacker to execute a malicious code by storing a specially crafted DLL in a specific folder when GENESIS64, ICONICS Suite, Hyper Historian, GENESIS32, and MC Works64 are installed with the Pager agent in the alarm multi-agent notification feature.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedGENESIS64cisa_csaf_ot

    For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf".

    https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf
  • FixedGENESIS64cisa_csaf_ot

    For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The latest white papers can be found at "https://iconics.com/About/Security/CERT".

    https://iconics.com/about/security/cert
  • FixedHyper Historiancisa_csaf_ot

    For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf".

    https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf
  • FixedHyper Historiancisa_csaf_ot

    For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The latest white papers can be found at "https://iconics.com/About/Security/CERT".

    https://iconics.com/about/security/cert
  • FixedICONICS Suitecisa_csaf_ot

    For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf".

    https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf
  • FixedICONICS Suitecisa_csaf_ot

    For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who do not need to use the Pager agent, download the fixed version 10.98 of later from the link "https://iconicsinc.my.site.com/community/s/resource-center/product-downloads?tabset-a9d51=51905" and install it. For more information, refer to the Mitsubishi Electric Iconics Digital Solutions whitepaper on security vulnerabilities. The latest white papers can be found at "https://iconics.com/About/Security/CERT".

    https://iconics.com/about/security/cert
  • MitigationGENESIS32cisa_csaf_ot

    For users of GENESIS64, ICONICS Suite, and Hyper Historian that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from custom installing this feature unless you specifically need it. The affected feature, the multi-agent notification feature, is no longer the part of the default installation for GENESIS64, ICONICS Suite, and Hyper Historian Version 10.97.3 and later. For users of GENESIS32 and MC Works64 that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from installing the multi-agent notification feature.

  • MitigationGENESIS64cisa_csaf_ot

    For users of GENESIS64, ICONICS Suite, and Hyper Historian that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from custom installing this feature unless you specifically need it. The affected feature, the multi-agent notification feature, is no longer the part of the default installation for GENESIS64, ICONICS Suite, and Hyper Historian Version 10.97.3 and later. For users of GENESIS32 and MC Works64 that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from installing the multi-agent notification feature.

  • MitigationHyper Historiancisa_csaf_ot

    For users of GENESIS64, ICONICS Suite, and Hyper Historian that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from custom installing this feature unless you specifically need it. The affected feature, the multi-agent notification feature, is no longer the part of the default installation for GENESIS64, ICONICS Suite, and Hyper Historian Version 10.97.3 and later. For users of GENESIS32 and MC Works64 that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from installing the multi-agent notification feature.

  • MitigationICONICS Suitecisa_csaf_ot

    For users of GENESIS64, ICONICS Suite, and Hyper Historian that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from custom installing this feature unless you specifically need it. The affected feature, the multi-agent notification feature, is no longer the part of the default installation for GENESIS64, ICONICS Suite, and Hyper Historian Version 10.97.3 and later. For users of GENESIS32 and MC Works64 that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from installing the multi-agent notification feature.

  • MitigationMC Works64cisa_csaf_ot

    For users of GENESIS64, ICONICS Suite, and Hyper Historian that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from custom installing this feature unless you specifically need it. The affected feature, the multi-agent notification feature, is no longer the part of the default installation for GENESIS64, ICONICS Suite, and Hyper Historian Version 10.97.3 and later. For users of GENESIS32 and MC Works64 that do not have a fixed version, Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric recommend preventing from installing the multi-agent notification feature.

  • No fix plannedGENESIS32cisa_csaf_ot

    Please take the mitigations since there are no plans to release a security update for Mitsubishi Electric GENESIS32 and MC Works64.

  • No fix plannedGENESIS32cisa_csaf_ot

    Please take the mitigations since there are no plans to release a security update for Mitsubishi Electric Iconics Digital Solutions GENESIS32.

  • No fix plannedGENESIS64cisa_csaf_ot

    For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.

  • No fix plannedGENESIS64cisa_csaf_ot

    For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.

  • No fix plannedHyper Historiancisa_csaf_ot

    For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.

  • No fix plannedHyper Historiancisa_csaf_ot

    For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.

  • No fix plannedICONICS Suitecisa_csaf_ot

    For Mitsubishi Electric GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.

  • No fix plannedICONICS Suitecisa_csaf_ot

    For Mitsubishi Electric Iconics Digital Solutions GENESIS64, ICONICS Suite, and Hyper Historian users who need to use the Pager agent, take the mitigations below.

  • No fix plannedMC Works64cisa_csaf_ot

    Please take the mitigations since there are no plans to release a security update for Mitsubishi Electric GENESIS32 and MC Works64.

02

cvss

Technical severity, 0–10. One row per scoring source.

7.0
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.4–7

v3.17highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US
v3.17highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.17highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jpexploitability 1 · impact 5.9
v3.16.4mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-427USCWE-427US
05

affected products (23)

Products and version ranges known to be affected.

showing 20 of 23
06

advisories (1)

Vendor and ecosystem advisories describing this.

  • ICSA-24-184-03Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update E)2024-06-27icsa · cisa_csaf_otUS

    Successful exploitation of these vulnerabilities could result in denial-of-service, improper privilege management, or potentially arbitrary code execution.

07

also known as (3)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otNVDCVE.orgMITRE
published 2024-07-04modified 2026-06-17
09

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan