CVE-2020-12015: Iconics Bizviz

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; ICONICS GenBroker32 version 9.5 and prior.

Affected products

Iconics Bizviz: affected versions not specified
Iconics Energy Analytix: affected versions not specified
Iconics Facility Analytix: affected versions not specified
Iconics GENESIS32: affected versions not specified
Iconics GENESIS64: affected versions not specified
Iconics Hyper Historian: affected versions not specified
Iconics Mobilehmi: affected versions not specified
Iconics Quality Analytix: affected versions not specified
Iconics Smart Energy Analytix: affected versions not specified
Mitsubishielectric Mc Works: up to and including 10.95.208.31
Mitsubishielectric Mc WORKS32: version 9.50.255.02 only

Published 2020-07-16. Last modified 2026-06-17.