Mitsubishi Electric Issues Patches for Industrial Software
New updates secure GENESIS and ICONICS suites against critical code execution risks that affect global manufacturing systems.
Updated on Oct. 27, 2026 in Software
Live Poll
Do you trust that major manufacturers are doing enough to secure their industrial software products?
Mitsubishi Electric has announced multiple security vulnerabilities affecting a wide range of its industrial software products, including GENESIS64 and ICONICS Suite. The company has released version 10.97.3 or later to patch these flaws, which could otherwise allow for arbitrary code execution or denial-of-service.
Why it matters
These vulnerabilities impact global critical manufacturing sectors that rely on Mitsubishi Electric's suite for process control and data management. Prompt patching is essential to prevent potential exploitation of industrial systems via crafted files or unauthorized network access.
The flaws carry a critical CVSS v3 score of 9.1 and encompass four specific CVE identifiers including CVE-2023-4863. Affected users must upgrade to version 10.97.3 or later to secure systems against these identified risks.
The players
Mitsubishi Electric
A global manufacturer of industrial automation systems, electrical equipment, and software platforms for critical infrastructure.
The details
The vulnerabilities stem from out-of-bounds writes—a memory safety error where software writes data past the buffer—alongside weak password recovery and improper privilege assignment. In certain products, attackers can trigger arbitrary code execution by importing a specially crafted file while acting as an administrator. Mitsubishi Electric advises operators to implement network-level blocks and restrict administrative access until updates are deployed.
Timeline
October 27, 2026: Official disclosure regarding software security vulnerabilities.
The Tech Race
This vulnerability disclosure reflects the ongoing security race within the industrial control sector, where software manufacturers must balance legacy system compatibility with modern exploit mitigations. The identified flaws underscore the reliance on standardized CVE reporting to maintain the integrity of interconnected manufacturing networks.
Operators in the manufacturing sector should immediately verify their current version of GENESIS64 and ICONICS Suite. Those running versions prior to 10.97.3 should schedule an emergency update to mitigate risks while restricting administrative network access.
The takeaway
Industrial operators must treat these vulnerabilities as high-priority, given the potential for unauthorized code execution in manufacturing environments. Monitor the official security portal for any further patches or specific configuration guidance for secondary products like BizViz.
Further reading
For more information on current industrial software security standards, visit our Software coverage.
More information
Download the latest patches and security documentation from the Mitsubishi Electric product downloads portal.
Source note: This article includes information reported by IT Security News - cybersecurity, infosecurity news.
Live Poll
Do you trust that major manufacturers are doing enough to secure their industrial software products?
