Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2022-33315

UNKNOWN
Published 2022-07-20T16:55:13
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2022-33315. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Deserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows an unauthenticated attacker to execute an arbitrary malicious code by leading a user to load a monitoring screen file including malicious XAML codes.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-93rr-jgp3-wcw3

Advisory Details

Deserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows an unauthenticated attacker to execute an arbitrary malicious code by leading a user to load a monitoring screen file including malicious XAML codes.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-33315
WEB https://jvn.jp/vu/JVNVU96480474/index.html
WEB https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf

Advisory provided by GitHub Security Advisory Database. Published: July 21, 2022, Modified: July 28, 2022

References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf
https://jvn.jp/vu/JVNVU96480474/index.html
Published: 2022-07-20T16:55:13
Last Modified: 2024-08-03T08:01:20.500Z
Copied to clipboard!