# CVE-2025-7376

## Summary

- **CVE ID:** CVE-2025-7376
- **Severity:** MEDIUM
- **CVSS Score:** 5.9 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N)
- **CWE:** CWE-64
- **Published:** Aug 6, 2025
- **Last Modified:** Apr 10, 2026

## Description

Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric Iconics Digital Solutions GENESIS64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS version 11.00, Mitsubishi Electric GENESIS64 all versions, Mitsubishi Electric MC Works64 all versions, and Mitsubishi Electric GENESIS version 11.00 allows a local authenticated attacker to make an unauthorized write to arbitrary files, by creating a symbolic link from a file used as a write destination by the processes of the affected products to a target file. This could allow the attacker to destroy the file on a PC with the affected products installed, resulting in a denial-of-service (DoS) condition on the PC if the destroyed file is necessary for the operation of the PC.

## Affected Products

- Mitsubishi Electric Corporation — GENESIS64 (all versions)
- Mitsubishi Electric Corporation — MC Works64 (all versions)
- Mitsubishi Electric Iconics Digital Solutions — GENESIS64 (all versions)
- Mitsubishi Electric Corporation — GENESIS (version 11.00)
- Mitsubishi Electric Iconics Digital Solutions — GENESIS (version 11.00)
- Mitsubishi Electric Corporation — GENESIS64 (versions 10.97.3 and prior)
- Mitsubishi Electric Iconics Digital Solutions — GENESIS64 (versions 10.97.3 and prior)
- Mitsubishi Electric Corporation — ICONICS Suite (versions 10.97.3 and prior)
- Mitsubishi Electric Iconics Digital Solutions — ICONICS Suite (versions 10.97.3 and prior)
- Mitsubishi Electric Corporation — MobileHMI (versions 10.97.3 and prior)
- Mitsubishi Electric Iconics Digital Solutions — MobileHMI (versions 10.97.3 and prior)
- Mitsubishi Electric Corporation — Hyper Historian (versions 10.97.3 and prior)
- Mitsubishi Electric Iconics Digital Solutions — Hyper Historian (versions 10.97.3 and prior)
- Mitsubishi Electric Corporation — AnalytiX (versions 10.97.3 and prior)
- Mitsubishi Electric Iconics Digital Solutions — AnalytiX (versions 10.97.3 and prior)
- Mitsubishi Electric Corporation — IoTWorX (version 10.95)
- Mitsubishi Electric Iconics Digital Solutions — IoTWorX (version 10.95)

## References

- [CNA](https://jvn.jp/vu/JVNVU96364629)
- [CNA](https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-009_en.pdf)
- [CNA](https://www.cisa.gov/news-events/ics-advisories/icsa-25-217-01)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.20%
- **EPSS Percentile:** 9.5

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._