Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-7376

Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric AnalytiX versions 10.97.3 and prior, Mitsubishi Electric IoTWorX version 10.95, Mitsubishi Electric GENESIS version 11.00, Mitsubishi Electric MC Works64 all version
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9221a70e769a08f17c5e16c2e3fbe5e9011dad96beeafe10d37f58d6df0e2ceb
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 15 assertions

{"defaultStatus":"unaffected","product":"ICONICS Suite","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/3

{"defaultStatus":"unaffected","product":"AnalytiX","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/9

{"defaultStatus":"unaffected","product":"GENESIS","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"version 11.00"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/13

{"defaultStatus":"unaffected","product":"AnalytiX","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/8

{"defaultStatus":"unaffected","product":"GENESIS","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"version 11.00"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/14

{"defaultStatus":"unaffected","product":"MC Works64","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/12

{"defaultStatus":"unaffected","product":"GENESIS64","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"ICONICS Suite","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/2

{"defaultStatus":"unaffected","product":"Hyper Historian","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/6

{"defaultStatus":"unaffected","product":"IoTWorX","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"version 10.95"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/10

{"defaultStatus":"unaffected","product":"MobileHMI","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/4

{"defaultStatus":"unaffected","product":"GENESIS64","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"MobileHMI","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/5

{"defaultStatus":"unaffected","product":"Hyper Historian","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/7

{"defaultStatus":"unaffected","product":"IoTWorX","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"version 10.95"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/11

Affected products and versions

15 source assertions
{"defaultStatus":"unaffected","product":"ICONICS Suite","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/3
{"defaultStatus":"unaffected","product":"AnalytiX","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/9
{"defaultStatus":"unaffected","product":"GENESIS","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"version 11.00"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/13
{"defaultStatus":"unaffected","product":"AnalytiX","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/8
{"defaultStatus":"unaffected","product":"GENESIS","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"version 11.00"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/14
{"defaultStatus":"unaffected","product":"MC Works64","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"all versions"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/12
{"defaultStatus":"unaffected","product":"GENESIS64","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/0
{"defaultStatus":"unaffected","product":"ICONICS Suite","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/2
{"defaultStatus":"unaffected","product":"Hyper Historian","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/6
{"defaultStatus":"unaffected","product":"IoTWorX","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"version 10.95"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/10
{"defaultStatus":"unaffected","product":"MobileHMI","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/4
{"defaultStatus":"unaffected","product":"GENESIS64","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"MobileHMI","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/5
{"defaultStatus":"unaffected","product":"Hyper Historian","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"versions 10.97.3 and prior"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/7
{"defaultStatus":"unaffected","product":"IoTWorX","vendor":"Mitsubishi Electric Iconics Digital Solutions","versions":[{"status":"affected","version":"version 10.95"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/affected/11

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-64","description":"CWE-64 Windows Shortcut Following (.LNK)","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"tags":["government-resource"],"url":"https://jvn.jp/vu/JVNVU96364629"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/references/0
{"tags":["government-resource"],"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-217-01"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/references/2
{"tags":["vendor-advisory"],"url":"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-009_en.pdf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:dc92ec60292be0682eab98478b684e82cde85b2338033ec0f83f0dc45b5a8310 · sha256:0817c4f2cdb489ce… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer