← Back

CVE-2022-29825

nvd nist
Published: Nov 25, 2022Modified: Nov 7, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allows an unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.

Affected (3)

Mitsubishielectric
1 product
Gx Works3
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Gx Works3
From 1.000a to 1.011m
Gx Works3
From 1.015r to 1.086q
Gx Works3
From 1.087r

Related CWEs

CWE-259
Use of Hard-coded Password
The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.
CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (6)

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
Third Party AdvisoryVDB Entry
Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory

Timeline

No history available yet.