Genesis32

Vendor:

First CVE: May 13, 2011 · Active for 15 years

10
Total CVEs
More Total CVEs than 88% of tracked products
2.5
Avg CVEs / Year
Higher CVE frequency than 74% of tracked products
8.6
Avg CVSS
Higher Avg CVSS than 77% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Genesis32 over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 13, 2011
15 years ago
Most Recent CVE
Jul 16, 2020
2,202 days ago

CVE Severity & Scoring

Genesis3210 CVEs
All CVEs352,727 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network5 (50.0%)
Unknown5 (50.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (50.0%)
High0 (0.0%)
Unknown5 (50.0%)
User Interaction
None5 (50.0%)
Unknown5 (50.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None5 (50.0%)
Unknown5 (50.0%)

Top CVEs

Signals from CVEs in this product scope (10 CVEs).

10 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 an
May 13, 20119.367NOYES
A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Elect
Jul 16, 20209.838NONO
A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability. Th
Jul 16, 20209.831NONO
A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC Works64 Version 4.02C
Jul 16, 20209.130NONO
Buffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9.2 and BizViz 8.05, 9.0, 9.1, and 9.2 allows remote attackers to cause a denial of
Apr 18, 201210.030NONO
An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document.
Feb 24, 20149.328NONO
The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which allows remote attackers to execut
Apr 18, 20129.327NONO
A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability. This affects: Mitsubishi Elec
Jul 16, 20207.526NONO
A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This issue affects: Mitsubishi Elec
Jul 16, 20207.520NONO
The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses an improper encryption algorithm for gene
Jul 31, 20124.416NONO

Exploit Exposure

Signals from CVEs in this product scope (10 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
10.0% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
10.0% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (10 CVEs).

Media Mentions

Signals from CVEs in this product scope (10 CVEs).

Top CNAs Publishing CVEs For Genesis32

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.2137.713.8%01
9.2026.819.3%01
9.237.914.3%01
9.1326.819.3%01
9.137.914.3%01
9.0126.819.3%01
9.037.914.3%01
8.0537.92.1%00
8.0419.31.9%00
8.0219.31.9%00
8.019.31.9%00