CVE-2022-29829

MEDIUM

Mitsubishi Electric GX Works3 <1.090U - Info Disclosure

Title source: llm
STIX 2.1

Description

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, Motion Control Setting(GX Works3 related software) versions from 1.035M to 1.042U, and MT Works2 versions from 1.100E to 1.200J allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry government-resource
https://jvn.jp/vu/JVNVU97244961/index.html
Third Party Advisory, US Government Resource government-resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05

Scores

CVSS v3 6.8
EPSS 0.0103
EPSS Percentile 59.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-321 CWE-798
Status published
Products (1)
mitsubishielectric/gx_works3 1.000a - 1.011m
Published Nov 25, 2022
Tracked Since Feb 18, 2026