Industrial Key Leak: Critical 9.3 CVSS Flaws Expose Mitsubishi’s GENESIS64 and ICONICS Suite

Mitsubishi Electric disclosed multiple high-severity vulnerabilities (CVE-2025-14815, CVE-2025-14816; CVSS 9.3) affecting GENESIS64, ICONICS Suite and related products that can expose SQL Server credentials, enable data tampering, and cause DoS. The advisory directs administrators to disable the local cache, remove cached files, restrict or remove HHSplitter.exe, and implement network and physical access controls while a one-click patch is not yet available.