Information Disclosure, Tampering, und Denial-of-Service Schwachstellen in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, und MC Works64

The primary impact of CVE-2025-14816 is the exposure of sensitive information in cleartext. This could include passwords, configuration data, or other confidential information that could be exploited by attackers. The affected products are widely used in industrial control systems (ICS) and operational technology (OT) environments, making this vulnerability particularly concerning. A successful exploitation could lead to unauthorized access to critical systems, data breaches, and disruption of industrial processes. The broad range of affected products increases the potential attack surface and the overall risk to organizations.

Organizations utilizing Mitsubishi Electric GENESIS64 and related products in their industrial control systems are at risk. This includes manufacturing plants, power generation facilities, and other critical infrastructure sectors. Legacy configurations and deployments using older versions of these products are particularly vulnerable, as are environments with limited network segmentation.

• windows / supply-chain:

Get-Process | Where-Object {$_.ProcessName -like '*genesis*'} | Select-Object Name, Id, CPU, WorkingSet

• windows / supply-chain:

Get-ScheduledTask | Where-Object {$_.TaskName -like '*genesis*'} | Select-Object TaskName, State, LastRunTime

• windows / supply-chain:

Get-WinEvent -LogName Application -FilterXPath "*[System[Provider[@Name='Mitsubishi Electric GENESIS64']]]" -MaxEvents 10

1. 2026-04-08Disclosure

   disclosure

1. Reserviert2025-12-17
2. Veröffentlicht2026-04-08
3. EPSS aktualisiert2026-04-16

The primary mitigation for CVE-2025-14816 is to upgrade to the patched versions of the affected products. Mitsubishi Electric has released updates for GENESIS64 versions 11.02 and later, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, and GENESIS. If upgrading is not immediately possible, consider implementing compensating controls such as restricting access to the GUI, monitoring network traffic for suspicious activity, and implementing strong authentication measures. Review and harden system configurations to minimize the potential impact of a successful exploitation. After upgrading, verify the fix by examining the GUI and confirming that sensitive information is no longer stored in cleartext.