Our takeCISA reports active exploitation in Mitsubishi Electric GENESIS64, ICONICS Suite, Hyper Historian and related products that can lead to arbitrary code execution, auth bypass, information disclosure, data tampering or DoS. OT operators: patch on your next maintenance window.Security Resilience desk
Sources (2)
- cisa_ics · cisa_ics
- cisa_advisories · cisa_advisories
What this means for you — Security leader:CISA reports active exploitation of multiple vulnerabilities in Mitsubishi Electric GENESIS64, ICONICS Suite, Hyper Historian and related products that can lead to arbitrary code execution, authentication bypass, information disclosure, data tampering or DoS. Review the advisory for affected versions and apply Mitsubishi's patches on your next maintenance window.
What this means for you — Lean IT orgs:If you run Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian or any of the listed products, check the CISA advisory for your exact version and install the vendor fixes as soon as you can.
What this means for you — MSP:Scan client environments for Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz. Patch immediately where present; most clients will be unaffected unless they operate these specific industrial software packages.
What this means for you — Researcher:CISA advisory ICSA-26-300-02 details active exploitation of CVE-2023-4863 (arbitrary code execution) plus three 2026 Mitsubishi flaws allowing auth bypass and arbitrary operations in GENESIS64, ICONICS Suite and related products. Full CSAF linked in sources.