PT-2022-19857 · Mitsubishi · Mitsubishi Electric Gx Works3+1

Anton Dorfman + 3 · Published 2022-11-24 · Updated 2023-05-31 · CVE-2022-29826

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GX Works3 versions 1.000A through 1.087R Motion Control Setting (GX Works3 related software) versions 1.000A through 1.042U

Description The issue allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.

Recommendations For Mitsubishi Electric GX Works3 versions 1.000A through 1.087R, update to a version that fixes the Cleartext Storage of Sensitive Information issue. For Motion Control Setting (GX Works3 related software) versions 1.000A through 1.042U, update to a version that fixes the Cleartext Storage of Sensitive Information issue.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2022-29826

Affected Products

Mitsubishi Electric Gx Works3

Motion Control Setting

References · 6

• https://osv.dev/vulnerability/CVE-2022-29826 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29826 · Security Note
• https://mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf · Vendor Advisory
• https://t.me/cvenotify/51460 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-22-333-05 · Note
• https://jvn.jp/vu/JVNVU97244961/index.html · Note