CVE-2022-29826 Information disclosure in GX Works3
Remote attackers can view sensitive project files and execute programs due to cleartext storage in Mitsubishi GX Works3 software.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-29826?
CVE-2022-29826 is a medium-severity vulnerability in Mitsubishi Electric Corporation GX Works3, published on 24 Nov 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.
Weakness: CWE-312
Which versions are affected by CVE-2022-29826?
It affects 1 product.
Products include Mitsubishielectric Gx Works3.
How do I fix CVE-2022-29826?
No fix has been published for CVE-2022-29826 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-29826 being exploited?
There is no known exploitation of CVE-2022-29826 in the wild and no public exploit code.
Other vulnerabilities in Mitsubishi Electric Corporation GX Works3
Sources
Also known as GHSA-f7hx-hg43-f938.