Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2022-33318

Deserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows a remote unauthenticated attacker to execute an arbitrary malicious code by sending specially crafted packets to the GENESIS64 server.

  • Published: Jul 20, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-33318
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
iconics / genesis64 10.97.1 10.97.1.x
iconics / genesis64 10.97 10.97.x
mitsubishielectric / mc_works64 - 10.95.210.01.x