CVE-2022-33318

📊 9.8 CRITICAL⚡ 1.8%🎯 0 exploits

📅 Published Jul 20, 2022

📋 Status: Modified

Deserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows a remote unauthenticated attacker to execute an arbitrary malicious code by sending specially crafted packets to the GENESIS64 server.

CVSS v3.1 • NVD

🎯 Affected Products & Systems

3 product configurations affected

Filter by type:

Type	Vendor	Product	Version Range	Status	CPE String
📱App	iconics	genesis64	10.97	Vulnerable	cpe:2.3:a:iconics:genesis64:10.97:::::::*
📱App	iconics	genesis64	10.97.1	Vulnerable	cpe:2.3:a:iconics:genesis64:10.97.1:::::::*
📱App	mitsubishielectric	mc works64	≤ 10.95.210.01	Vulnerable	cpe:2.3:a:mitsubishielectric:mc_works64::::::::

📱

iconics / genesis64

Application

Vulnerable

Version: 10.97

CPE:

cpe:2.3:a:iconics:genesis64:10.97:*:*:*:*:*:*:*

📱

iconics / genesis64

Application

Vulnerable

Version: 10.97.1

CPE:

cpe:2.3:a:iconics:genesis64:10.97.1:*:*:*:*:*:*:*

📱

mitsubishielectric / mc works64

Application

Vulnerable

Version: ≤ 10.95.210.01

CPE:

cpe:2.3:a:mitsubishielectric:mc_works64:*:*:*:*:*:*:*:*

Metrics

9.8 CRITICALCVSS v3.1[email protected]

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:

NETWORK

Complexity:

LOW

Privileges:

NONE

User Interaction:

NONE

Confidentiality:

HIGH

Integrity:

HIGH

Availability:

HIGH

Scope:

UNCHANGED

🔍 Technical Details

Analysis Status

Modified

CVSS Details

9.8 (CRITICAL)v3.1

Source: [email protected]

EPSS Details

1.8% (Minimal)82.1th percentile

Last updated: Nov 1, 2025

Exploitation probability within 30 days

Published Date

Jul 20, 2022 (3 years ago)

Last Modified

Nov 21, 2024 (11 months ago)

Security Weaknesses1

CWE-502

References3

NVDadvisorygeneral