{"id":"CVE-2022-33319","state":"PUBLISHED","title":"Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mits","description":"Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior, and Mitsubishi Electric MC Works64 versions 4.04E and prior allows a remote unauthenticated attacker to disclose information on memory or cause a Denial of Service (DoS) condition by sending specially crafted packets to the GENESIS64, ICONICS Suite, GENESIS32, or MC Works64 server.","publishedAt":"2022-07-20T16:58:49.000Z","updatedAt":"2026-01-09T05:14:32.690Z","severity":{"score":8.2,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","source":"Mitsubishi"},"assigner":"Mitsubishi","products":["Mitsubishi Electric GENESIS64","Mitsubishi Electric Iconics Digital Solutions GENESIS64","Mitsubishi Electric ICONICS Suite","Mitsubishi Electric Iconics Digital Solutions ICONICS Suite","Mitsubishi Electric GENESIS32","Mitsubishi Electric Iconics Digital Solutions GENESIS32","Mitsubishi Electric MC Works64"],"affected":[{"vendor":"Mitsubishi Electric","product":"GENESIS64","defaultStatus":"unaffected","versions":[{"version":"Versions 10.97 to 10.97.1","status":"affected"}]},{"vendor":"Mitsubishi Electric Iconics Digital Solutions","product":"GENESIS64","defaultStatus":"unaffected","versions":[{"version":"Versions 10.97 to 10.97.1","status":"affected"}]},{"vendor":"Mitsubishi Electric","product":"ICONICS Suite","defaultStatus":"unaffected","versions":[{"version":"Versions 10.97 to 10.97.1","status":"affected"}]},{"vendor":"Mitsubishi Electric Iconics Digital Solutions","product":"ICONICS Suite","defaultStatus":"unaffected","versions":[{"version":"Versions 10.97 to 10.97.1","status":"affected"}]},{"vendor":"Mitsubishi Electric","product":"GENESIS32","defaultStatus":"unaffected","versions":[{"version":"Versions 9.7 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Iconics Digital Solutions","product":"GENESIS32","defaultStatus":"unaffected","versions":[{"version":"Versions 9.7 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric","product":"MC Works64","defaultStatus":"unaffected","versions":[{"version":"Versions 4.04E and prior","status":"affected"}]}],"references":["https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf","https://jvn.jp/vu/JVNVU96480474/index.html","https://www.cisa.gov/news-events/ics-advisories/icsa-22-202-04"],"weaknesses":["CWE-125"],"ingestedAt":"2026-10-29T19:50:12.412Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/33xxx/CVE-2022-33319.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-33319","state":"PUBLISHED","datePublished":"2022-07-20T16:58:49.000Z","dateUpdated":"2026-01-09T05:14:32.690Z","assignerShortName":"Mitsubishi","assignerOrgId":"e0f77b61-78fd-4786-b3fb-1ee347a748ad","dateReserved":"2022-06-14T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior, and Mitsubishi Electric MC Works64 versions 4.04E and prior allows a remote unauthenticated attacker to disclose information on memory or cause a Denial of Service (DoS) condition by sending specially crafted packets to the GENESIS64, ICONICS Suite, GENESIS32, or MC Works64 server."}],"affected":[{"vendor":"Mitsubishi Electric","product":"GENESIS64","defaultStatus":"unaffected","versions":[{"version":"Versions 10.97 to 10.97.1","status":"affected"}]},{"vendor":"Mitsubishi Electric Iconics Digital Solutions","product":"GENESIS64","defaultStatus":"unaffected","versions":[{"version":"Versions 10.97 to 10.97.1","status":"affected"}]},{"vendor":"Mitsubishi Electric","product":"ICONICS Suite","defaultStatus":"unaffected","versions":[{"version":"Versions 10.97 to 10.97.1","status":"affected"}]},{"vendor":"Mitsubishi Electric Iconics Digital Solutions","product":"ICONICS Suite","defaultStatus":"unaffected","versions":[{"version":"Versions 10.97 to 10.97.1","status":"affected"}]},{"vendor":"Mitsubishi Electric","product":"GENESIS32","defaultStatus":"unaffected","versions":[{"version":"Versions 9.7 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Iconics Digital Solutions","product":"GENESIS32","defaultStatus":"unaffected","versions":[{"version":"Versions 9.7 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric","product":"MC Works64","defaultStatus":"unaffected","versions":[{"version":"Versions 4.04E and prior","status":"affected"}]}],"references":[{"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf","tags":["vendor-advisory"]},{"url":"https://jvn.jp/vu/JVNVU96480474/index.html","tags":["government-resource"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-22-202-04","tags":["government-resource"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Mitsubishi","orgId":"e0f77b61-78fd-4786-b3fb-1ee347a748ad","dateUpdated":"2026-01-09T05:14:32.690Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.5.0"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","ID":"CVE-2022-33319","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"ICONICS GENESIS64; Mitsubishi Electric MC Works64","version":{"version_data":[{"version_value":"ICONICS GENESIS64 versions 10.97.1 and prior"},{"version_value":"Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Out-of-bounds Read vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows a remote unauthenticated attacker to disclose information on memory or cause a Denial of Service (DoS) condition by sending specially crafted packets to the GENESIS64 server."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Out-of-bounds Read"}]}]},"references":{"reference_data":[{"name":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf","refsource":"MISC","url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf"},{"name":"https://jvn.jp/vu/JVNVU96480474/index.html","refsource":"MISC","url":"https://jvn.jp/vu/JVNVU96480474/index.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://jvn.jp/vu/JVNVU96480474/index.html","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T08:09:21.355Z"}}]}}}