CVE-2022-29832
25.11.2022, 00:15
Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer versions 8.40S and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could obtain information about the project file for MELSEC safety CPU modules or project file for MELSEC Q/FX/L series with security setting.Enginsight
Vendor | Product | Version |
---|---|---|
mitsubishielectric | gx_works3 | 1.015r ≤ 𝑥 ≤ 1.086q |
mitsubishielectric | gx_works3 | 1.087r ≤ |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-316 - Cleartext Storage of Sensitive Information in MemoryThe application stores sensitive information in cleartext in memory.
- CWE-312 - Cleartext Storage of Sensitive InformationThe product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
References