CVE-2025-148169.3CriticalCWE-317

CVE-2025-14816: Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64

Mitsubishi Electric Corporation · GENESIS64

Vendor fix available · Affected: Mitsubishi Electric Corporation GENESIS64 · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.1%probability of exploitation in the next 30 days

0th percentile

050100

Higher than 0% of scored CVEs

9.3CriticalCVSS 4.0

LowMediumHighCrit.

DescriptionCVE.org

Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric AnalytiX versions 10.97.3 and prior, Mitsubishi Electric GENESIS versions 11.02 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions AnalytiX versions 10.97.3 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.02 and prior allows a local attacker to disclose the SQL Server credentials displayed in plain text in the GUI of the Hyper Historian Splitter feature by exploiting this vulnerability, when SQL authentication is used for the SQL Server authentication. As a result, the unauthorized attacker could access the SQL Server and disclose, tamper with, or destroy data on the server, potentially cause a denial-of-service (DoS) condition on the system.

Affected products13

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Mitsubishi Electric Corporation · GENESIS64versions 10.97.3 and prior
Mitsubishi Electric Iconics Digital Solutions · GENESIS64versions 10.97.3 and prior
Mitsubishi Electric Corporation · ICONICS Suiteversions 10.97.3 and prior
Mitsubishi Electric Iconics Digital Solutions · ICONICS Suiteversions 10.97.3 and prior
Mitsubishi Electric Corporation · MobileHMIversions 10.97.3 and prior
Mitsubishi Electric Iconics Digital Solutions · MobileHMIversions 10.97.3 and prior
Mitsubishi Electric Corporation · Hyper Historianversions 10.97.3 and prior
Mitsubishi Electric Iconics Digital Solutions · Hyper Historianversions 10.97.3 and prior
Mitsubishi Electric Corporation · AnalytiXversions 10.97.3 and prior
Mitsubishi Electric Iconics Digital Solutions · AnalytiXversions 10.97.3 and prior
Mitsubishi Electric Corporation · GENESISversions 11.02 and prior
Mitsubishi Electric Iconics Digital Solutions · GENESISversions 11.02 and prior
Mitsubishi Electric Corporation · MC Works64all versions

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Cleartext Storage of Sensitive Information in GUI · Cryptography
Vendor: Mitsubishi Electric Corporation
Published: April 2026
Band: Unlikely (under 1%), April 2026

CoverageNo articles yet

No CyberSIXT article names CVE-2025-14816 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.