CVE-2022-29832
- State
- Published
- Severity
- 3.7 Low
- Published
- Nov 24, 2022
- Updated
- Apr 25, 2025
- Reserved
- Apr 27, 2022
Description
Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer versions 8.40S and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could obtain information about the project file for MELSEC safety CPU modules or project file for MELSEC Q/FX/L series with security setting.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.7 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | Mitsubishi |
Weaknesses
- CWE-316 Cleartext Storage of Sensitive Information in Memory
Affected Products
| Product | Versions |
|---|---|
GX Works3Mitsubishi Electric Corporation |
|
GX Works2Mitsubishi Electric Corporation |
|
GX DeveloperMitsubishi Electric Corporation |
|
References
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdfvendor-advisory
- https://jvn.jp/vu/JVNVU97244961government-resource
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.