PT-2025-51797 · Mitsubishi · Gt Designer3

Published 2025-12-17 · Updated 2025-12-17 · CVE-2025-11009

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GT Designer3 Version1 (GOT2000) (affected versions not specified) Mitsubishi Electric GT Designer3 Version1 (GOT1000) (affected versions not specified)

Description A security issue exists in Mitsubishi Electric GT Designer3 Version1 (GOT2000) and GT Designer3 Version1 (GOT1000) related to the storage of sensitive information in plaintext within project files. A local, unauthenticated attacker could potentially obtain credentials from these files. Successful exploitation could allow an attacker to operate GOT2000 series or GOT1000 series devices illegally using the compromised credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-11009

Affected Products

Gt Designer3

References · 6

• https://mitsubishielectric.com/psirt/vulnerability/pdf/2025-017_en.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11009 · Security Note
• https://jvn.jp/vu/JVNVU99629801 · Note
• https://t.me/cveNotify/146039 · Telegram Post
• https://t.me/CVEtracker/40020 · Telegram Post
• https://twitter.com/CVEnew/status/2001350836782534728 · Twitter Post