CVE-2022-29826

HIGH 7.5CVE-2022-29826 · Published 25/11/2022 · updated 17/06/2026

In short

CVE-2022-29826 is a HIGH (CVSS 7.5) vulnerability affecting gx works3 (mitsubishielectric).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gx works3 mitsubishielectric	`≥ 1.000a, ≤ 1.011m≥ 1.015r, ≤ 1.086q`	No fix yet

Description

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.

References

jvn.jp/vu/JVNVU97244961/index.html · Third Party Advisory
cisa.gov/uscert/ics/advisories/icsa-22-333-05
mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf · Mitigation

More vulnerabilities in gx works3

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gx works3

mitsubishielectric

≥ 1.000a, ≤ 1.011m≥ 1.015r, ≤ 1.086q

No fix yet

Description

More vulnerabilities in gx works3

See all →