CVE-2022-33317 - CVE House
Back to Database
Status published High CVE-2022-33317

Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi...

Vulnerability Description

Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric MC Works64 versions 4.04E and prior allows an unauthenticated attacker to execute an arbitrary malicious code by leading a user to load a monitoring screen file including malicious script codes.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-33317

Credits & Attribution

No credits recorded in the NVD database.

References

More from Mitsubishi Electric

View All →
CVE-2022-40266
Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series
Medium 5.3
CVE-2022-33320
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions...
High 7.8
CVE-2022-33319
Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to...
High 8.2
CVE-2022-33318
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions...
Critical 9.8
CVE-2022-33316
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions...
High 7.8

Affected Vendor

Mitsubishi Electric

View all reports →

Affected Software

GENESIS64, ICONICS Suite, MC Works64
Vulnerable Versions:
Versions 10.97 to 10.97.1, Versions 4.04E and prior

Timeline

Official Publish: July 20th, 2022
Last Modified: January 9th, 2026
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-829

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.