CVEvulnerability
CVE-2022-29832
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-11-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-312, CWE-316
Description
Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer versions 8.40S and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could obtain information about the project file for MELSEC safety CPU modules or project file for MELSEC Q/FX/L series with security setting.
Affected configurations
• mitsubishielectric gx works3 (>= 1.015r <= 1.086q)
• mitsubishielectric gx works3 (>= 1.087r)
Related
References
- https://jvn.jp/vu/JVNVU97244961 Third Party Advisory, VDB Entry
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05 www.cisa.gov
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf Mitigation, Vendor Advisory
- https://jvn.jp/vu/JVNVU97244961 Third Party Advisory, VDB Entry
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05 www.cisa.gov
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf Mitigation, Vendor Advisory