CVE-2022-29826

Published Nov 25, 2022

Last updated a year ago

Overview

Description
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.
Source
Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
NVD status
Modified

Risk scores

CVSS 3.1

Type
Primary
Base score
7.5
Impact score
3.6
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity
HIGH

Weaknesses

nvd@nist.gov
CWE-312
Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
CWE-312

Social media

Hype score
Not currently trending

Configurations