CVE-2022-29833

Опубликовано: 25 нояб. 2022

Источник: nvd

CVSS3: 6.8

CVSS3: 6.5

EPSS Низкий

Описание

Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could access to MELSEC safety CPU modules illgally.

Ссылки

https://jvn.jp/vu/JVNVU97244961
Third Party Advisory
VDB Entry
https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf
Mitigation
Vendor Advisory
https://jvn.jp/vu/JVNVU97244961
Third Party Advisory
VDB Entry
https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*

Версия от 1.015r (включая) до 1.086q (включая)

cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*

Версия от 1.087r (включая)

EPSS

Процентиль: 69%

0.00596

Низкий

6.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-522

Связанные уязвимости

GHSA-37x5-q2m2-89q6

CVSS3: 6.5

github

около 3 лет назад

Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote unauthorized attacker to disclose sensitive information. As a result, unauthorized users could access to MELSEC safety CPU modules illgally.

EPSS

Процентиль: 69%

0.00596

Низкий

6.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-522