Act today Critical Known exploited Patch available
Mitsubishi Electric ICONICS and GENESIS software has flaws allowing code execution and login bypass
CISA ICS AdvisoriesMitsubishi Electric, ICONICS, GENESIS64CVE-2023-4863, CVE-2026-16436, CVE-2026-16437
What happened. Flaws in Mitsubishi Electric's ICONICS-based software could let an attacker run code (CVE-2023-4863), bypass authentication (CVE-2026-16436, CVE-2026-16437) or perform arbitrary operations (CVE-2026-16438). Effects include data tampering and denial of service.
Who is affected. Mitsubishi Electric GENESIS64 up to 10.97.3, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32, BizViz and GENESIS up to 11.03.
What to do. Check whether you run the listed GENESIS64, ICONICS Suite or related products and versions, then apply the vendor's fixes.
When to act. Act today: on CISA's list of known exploited flaws
Editor's reading
Forasset ownerOT security leaddetection engineer
- Purdue level
- L3
- L2
Why: SCADA, HMI and historian software runs on supervisory servers and workstations (L2) and on site operations servers such as historians (L3).
- Are you exposed?
Search the asset inventory for GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz, and compare versions to those listed.
- If you cannot fix it yet
- Restrict network access to the SCADA and HMI servers to known engineering and operator hosts.
- Keep these servers off the internet and reachable remotely only through a multi-factor remote-access gateway.
- Limit access to mobile and web HMI services to approved clients.
- Watch for
- Logons or operations on SCADA, HMI or historian servers from unusual hosts, especially from the IT network.
- Crashes or restarts of ICONICS services, which could point to denial-of-service or exploitation attempts.
- ATT&CK for ICS
- T0866Exploitation of Remote ServicesT0859Valid Accounts
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: CISA ICS Advisories (opens cisa.gov)
More on Mitsubishi Electric CVE-2023-4863 CVE-2026-16436 CVE-2026-16437