CVE-2022-29828

Опубликовано: 25 нояб. 2022

Источник: nvd

CVSS3: 6.8

CVSS3: 7.5

EPSS Низкий

Описание

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers may view programs and project file or execute programs illegally.

Ссылки

https://jvn.jp/vu/JVNVU97244961/index.html
Third Party Advisory
VDB Entry
https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf
Mitigation
Vendor Advisory
https://jvn.jp/vu/JVNVU97244961/index.html
Third Party Advisory
VDB Entry
https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*

Версия от 1.000a (включая) до 1.011m (включая)

cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*

Версия от 1.015r (включая) до 1.086q (включая)

cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*

Версия от 1.087r (включая)

EPSS

Процентиль: 77%

0.01013

Низкий

6.8 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-321

CWE-798

Связанные уязвимости

GHSA-32fm-h2hh-vxjg

CVSS3: 7.5

github

около 3 лет назад

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthorized users may view or execute programs illegally.

EPSS

Процентиль: 77%

0.01013

Низкий

6.8 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-321

CWE-798