CVE-2022-29826

Опубликовано: 25 нояб. 2022

Источник: nvd

CVSS3: 6.8

CVSS3: 7.5

EPSS Низкий

Описание

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.

Ссылки

https://jvn.jp/vu/JVNVU97244961/index.html
Third Party Advisory
VDB Entry
https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf
Mitigation
Vendor Advisory
https://jvn.jp/vu/JVNVU97244961/index.html
Third Party Advisory
VDB Entry
https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*

Версия от 1.000a (включая) до 1.011m (включая)

cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*

Версия от 1.015r (включая) до 1.086q (включая)

EPSS

Процентиль: 46%

0.00234

Низкий

6.8 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-312

Связанные уязвимости

GHSA-f7hx-hg43-f938

CVSS3: 7.5

github

около 3 лет назад

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions 1.086Q and prior allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthorized users may view or execute programs illegally.

EPSS

Процентиль: 46%

0.00234

Низкий

6.8 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-312