Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2022-29832

Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer v

Description

Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer versions 8.40S and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could obtain information about the project file for MELSEC safety CPU modules or project file for MELSEC Q/FX/L series with security setting.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mitsubishi Electric Corporation GX Works3

Default version status: unaffected

  • 1.015R and lateraffected

Mitsubishi Electric Corporation GX Works2

Default version status: unaffected

  • all versionsaffected

Mitsubishi Electric Corporation GX Developer

Default version status: unaffected

  • 8.40S and lateraffected

References