CVE-2024-8300: high-severity vulnerability in Mitsubishi Electric Corporation GENESIS64
Malicious Code Execution Vulnerability in GENESIS64 and ICONICS Suite
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7epss 0.2%
Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, and Mitsubishi Electric Iconics Digital Solutions ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3 allows a local authenticated attacker to execute a malicious code by tampering with a specially crafted DLL. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or cause a denial of service (DoS) condition on the products.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Mitsubishi Electric Corporation · GENESIS64Mitsubishi Electric Corporation · ICONICS SuiteMitsubishi Electric Iconics Digital Solutions · GENESIS64Mitsubishi Electric Iconics Digital Solutions · ICONICS SuiteRelated CVEs — Mitsubishi Electric Corporation GENESIS64
In the same product, most dangerous first.
CVE-2022-33318CRITICALCVE-2022-33318EPSS 50.1%CVE-2022-33319HIGHCVE-2022-33319EPSS 1.7%CVE-2022-29834HIGHCVE-2022-29834EPSS 1.7%CVE-2022-23130MEDIUMCVE-2022-23130EPSS 1.0%CVE-2024-1573MEDIUMCVE-2024-1573EPSS 0.6%CVE-2025-11774HIGHMalicious Code Execution Vulnerability in the Software Keyboard Function of GENESIS64, ICONICS Suite, Mobile HMI, and MC Works64EPSS 0.6%