CVE-2024-1574 is a vulnerability classified under CWE-470 (Use of Externally-Controlled Input to Select Classes or Code, also known as unsafe reflection) affecting Mitsubishi Electric Iconics Digital Solutions products, including GENESIS64 versions 10.97 to 10.97.2, GENESIS32, BizViz, and MC Works64. The flaw resides in the licensing feature where an attacker with local access can manipulate a specific file that is not adequately protected by the system. This manipulation allows the attacker to influence the reflection mechanism to load and execute arbitrary code with administrative privileges. The vulnerability requires local access, low privileges, and user interaction, with a high attack complexity, making remote exploitation unlikely without prior access. The CVSS v3.1 score is 6.7 (medium severity), reflecting the significant impact on confidentiality, integrity, and availability if exploited. The vulnerability affects critical industrial control system (ICS) software widely used in SCADA and automation environments, potentially allowing attackers to gain full control over affected systems. No patches or exploits are currently publicly available, but the risk remains due to the critical nature of the affected software in industrial environments.

The impact on European organizations is substantial given the widespread use of Mitsubishi Electric Iconics products in industrial automation, manufacturing, energy, and critical infrastructure sectors. Exploitation could lead to unauthorized administrative control over ICS and SCADA systems, resulting in data breaches, operational disruption, sabotage, or safety incidents. Confidentiality is at risk as attackers could access sensitive operational data; integrity is compromised by the ability to execute arbitrary code and alter system behavior; availability could be affected by disruption or destruction of control processes. The requirement for local access limits the attack surface but insider threats or compromised endpoints could facilitate exploitation. The vulnerability poses a significant risk to critical infrastructure operators and manufacturing plants across Europe, potentially impacting supply chains and national security.

Organizations should immediately audit and restrict local access to systems running affected Mitsubishi Electric Iconics products, enforcing strict access controls and monitoring for suspicious file modifications. Implement application whitelisting and integrity verification on critical files related to licensing features to prevent tampering. Deploy endpoint detection and response (EDR) solutions to detect anomalous behavior indicative of exploitation attempts. Although no official patches are currently available, organizations should engage with Mitsubishi Electric for updates and apply patches as soon as they are released. Network segmentation should isolate ICS environments from general IT networks to reduce the risk of lateral movement. Conduct user training to minimize risky behaviors that could lead to local compromise. Regularly back up system configurations and critical data to enable recovery in case of an incident.