VULNERABILITY INTELLIGENCE
CVE-2025-3784
CVSS score5.5 MEDIUM
EPSS probability0.11%
CISA KEVNot currently listed
Published2025-11-27
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext from project files. As a result, the attacker may be able to open project files protected by user authentication using disclosed credential information, and obtain or modify project information.
Weakness classification
- Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp: CWE-312