CVE-2022-29826

MEDIUM

Mitsubishi Electric GX Works3 1.000A-1.087R - Unauthenticated Sensitive Information Disclosure via Cleartext Storage

Title source: llm
STIX 2.1

Description

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry government-resource
https://jvn.jp/vu/JVNVU97244961/index.html
Third Party Advisory, US Government Resource government-resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05

Scores

CVSS v3 6.8
EPSS 0.0013
EPSS Percentile 32.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-312
Status published
Products (1)
mitsubishielectric/gx_works3 1.000a - 1.011m
Published Nov 25, 2022
Tracked Since Feb 18, 2026