QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-23130

Back to search

CVE-2022-23130

Published: Jan 21, 2022

Modified: Jan 8, 2026

PUBLISHED

CVSS v3.1

5.9

MEDIUM

Description

Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi Electric ICONICS Suite versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 and prior, Mitsubishi Electric GENESIS32 versions 9.7 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior allows an attacker to cause a DoS condition in the database server by getting a legitimate user to import a configuration file containing specially crafted stored procedures into GENESIS64, ICONICS Suite, MC Works64, or GENESIS32 and execute commands against the database from GENESIS64, ICONICS Suite, MC Works64, or GENESIS32.

VendorProductVersions

Mitsubishi Electric Corporation

GENESIS64

affected
Versions 10.97 and prior

Mitsubishi Electric Iconics Digital Solutions

GENESIS64

affected
Versions 10.97 and prior

Mitsubishi Electric Corporation

ICONICS Suite

affected
Versions 10.97 and prior

Mitsubishi Electric Iconics Digital Solutions

ICONICS Suite

affected
Versions 10.97 and prior

Mitsubishi Electric Corporation

MC Works64

affected
Versions 4.00A to 4.04E

Mitsubishi Electric Corporation

GENESIS32

affected
Versions 9.7 or prior

Mitsubishi Electric Iconics Digital Solutions

GENESIS32

affected
Versions 9.7 or prior

Weaknesses (CWE)

CWE-126

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

High

User Interaction

Required

Scope

Changed

Confidentiality

None

Integrity

Low

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now