CVEvulnerability
CVE-2022-29826
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-11-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-312
Description
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.
Affected configurations
• mitsubishielectric gx works3 (>= 1.000a <= 1.011m)
• mitsubishielectric gx works3 (>= 1.015r <= 1.086q)
Related
Weakness · CWE (1)
- CWE-312 Cleartext Storage of Sensitive Information weakness
References
- https://jvn.jp/vu/JVNVU97244961/index.html Third Party Advisory, VDB Entry
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05 www.cisa.gov
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf Mitigation, Vendor Advisory
- https://jvn.jp/vu/JVNVU97244961/index.html Third Party Advisory, VDB Entry
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05 www.cisa.gov
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf Mitigation, Vendor Advisory