VULNERABILITY INTELLIGENCE
CVE-2022-29826
CVSS score6.8 MEDIUM
EPSS probability0.77%
CISA KEVNot currently listed
Published2022-11-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Description
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.
Weakness classification
- CWE-312: Cleartext Storage of Sensitive Information
Primary references
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp — Third Party Advisory, VDB Entry
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp — Mitigation, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory