CVE Tools

CVE-2025-7376

Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS

Published: Aug 6, 2025Updated: Aug 6, 2025 Sources: CVE List NVD BDU csafCWE-64

Description

Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric Iconics Digital Solutions GENESIS64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS version 11.00, Mitsubishi Electric GENESIS64 all versions, Mitsubishi Electric MC Works64 all versions, and Mitsubishi Electric GENESIS version 11.00 allows a local authenticated attacker to make an unauthorized write to arbitrary files, by creating a symbolic link from a file used as a write destination by the processes of the affected products to a target file. This could allow the attacker to destroy the file on a PC with the affected products installed, resulting in a denial-of-service (DoS) condition on the PC if the destroyed file is necessary for the operation of the PC.

No summary for this CVE yet.

CVSS Vector Breakdown

AV:LAC:LPR:LUI:RS:CC:NI:HA:N
Exploitability
AV:LAttack Vector
Local
AC:LAttack Complexity
Low
PR:LPrivileges Required
Low
UI:RUser Interaction
Required
Scope
S:CScope
Changed
Impact
C:NConfidentiality
None
I:HIntegrity
High
A:NAvailability
None

Weaknesses

Affected Products

mitsubishi electric corporationcommercialJPICS / OT / IoTaka mitsubishi electric
iconicscommercialUSICS / OT / IoTaka iconics inc
mitsubishi electric iconics digital solutionscommercialJPICS / OT / IoTaka genesis32, genesis64, iconics suite
and 11 more affected products View all →

Exploitability

Official Patch Available

References

and 12 more references View all →

Timeline

Published
Aug 6, 2025
Last Updated
Aug 6, 2025

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2025-7376 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows