CVE-2024-7587— Information Disclosure, Information Tampering and Denial of Service (DoS) Vulnerability in GENESIS64, ICONICS Suite, MC Works64, and GENESIS32
Quick assessment
Affected
Mitsubishi Electric Corporation GENESIS64
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Mitsubishi Electric MC Works64和Mitsubishi Electric GENESIS64都是日本三菱电机（Mitsubishi Electric）公司的产品。Mitsubishi Electric MC Works64是一套数据采集与监控系统（SCADA）。Mitsubishi Electric GENESIS64是一个 SCADA 套件。 Mitsubishi Electric MC Works64和Mitsubishi Electric GENESIS64存在安全漏洞，
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-7587
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Information Disclosure, Information Tampering and Denial of Service (DoS) Vulnerability in GENESIS64, ICONICS Suite, MC Works64, and GENESIS32
Source: CVE Program / CVE List V5
Vulnerability Description
Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 versions 9.70.300.23 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.70.300.23 and prior, and Mitsubishi Electric MC Works64 all versions allows a local authenticated attacker to disclose or tamper with confidential information and data contained in the products, or cause a denial of service (DoS) condition on the products, by accessing a folder with incorrect permissions, when GenBroker32 is installed on the same PC as GENESIS64, ICONICS Suite, MC Works64, or GENESIS32.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
缺省权限不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Mitsubishi Electric MC Works64和Mitsubishi Electric GENESIS64 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mitsubishi Electric MC Works64和Mitsubishi Electric GENESIS64都是日本三菱电机（Mitsubishi Electric）公司的产品。Mitsubishi Electric MC Works64是一套数据采集与监控系统（SCADA）。Mitsubishi Electric GENESIS64是一个 SCADA 套件。 Mitsubishi Electric MC Works64和Mitsubishi Electric GENESIS64存在安全漏洞，
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Mitsubishi Electric Corporation | GENESIS64 | Versions 10.97.3 and prior | - |
|
| Mitsubishi Electric Corporation | MC Works64 | All versions | - |
|
| Mitsubishi Electric Iconics Digital Solutions | GENESIS64 | Versions 10.97.3 and prior | - |
|
| Mitsubishi Electric Corporation | ICONICS Suite | Versions 10.97.3 and prior | - |
|
| Mitsubishi Electric Iconics Digital Solutions | ICONICS Suite | Versions 10.97.3 and prior | - |
|
| Mitsubishi Electric Corporation | GENESIS32 | Versions 9.70.300.23 and prior | - |
|
| Mitsubishi Electric Iconics Digital Solutions | GENESIS32 | Versions 9.70.300.23 and prior | - |
|
II. Public POCs for CVE-2024-7587
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-7587
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-7587 (2)
-
ICONICS and Mitsubishi Electric Products | CISA government-resource
-
IV. Related Vulnerabilities
Same product: GENESIS64
-
CVE-2025-14816
Information Disclosure, Tampering, and Denial-of-Service Vul -
CVE-2025-14815
Information Disclosure, Tampering, and Denial-of-Service Vul -
CVE-2025-11774
Malicious Code Execution Vulnerability in the Software Keybo -
CVE-2025-7376
Information Tampering Vulnerability in Multiple Processes of -
CVE-2025-0921
Information Tampering Vulnerability in Multiple Services of
Same vendor: Mitsubishi Electric Corporation
-
CVE-2026-15688
Password Authentication Bypass Vulnerability in GX Works3 an -
CVE-2026-13584
Information tampering and Denial-of-service (DoS) vulnerabil -
CVE-2026-8806
Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series -
CVE-2026-8805
Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series -
CVE-2026-5667
Information Disclosure, Information Tampering, or Denial-of-
Same weakness: CWE-276
-
CVE-2026-100718
Froxlor before 2.3.12 Authentication Bypass via EmailSender. -
CVE-2026-6718
Multiple Vulnerabilities in IBM Concert Software -
CVE-2026-82165
Dell Integration Suite 6.7.2权限缺陷 -
CVE-2026-82163
Dell vPro 4.7.2前默认权限不当致信息泄露 -
CVE-2026-92252
Incorrect Default Permissions in WatchDog Anti-Virus Install
V. Comments for CVE-2024-7587
No comments yet