CVE-2022-29829

HIGH 7.5CVE-2022-29829 · Published 25/11/2022 · updated 17/06/2026

In short

CVE-2022-29829 is a HIGH (CVSS 7.5) vulnerability affecting gx works3 (mitsubishielectric).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gx works3 mitsubishielectric	`≥ 1.000a, ≤ 1.011m≥ 1.015r, ≤ 1.086q≥ 1.087r`	No fix yet

Description

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, Motion Control Setting(GX Works3 related software) versions from 1.035M to 1.042U, and MT Works2 versions from 1.100E to 1.200J allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.

References

jvn.jp/vu/JVNVU97244961/index.html · Third Party Advisory
cisa.gov/uscert/ics/advisories/icsa-22-333-05
mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf · Mitigation

More vulnerabilities in gx works3

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gx works3

mitsubishielectric

≥ 1.000a, ≤ 1.011m≥ 1.015r, ≤ 1.086q≥ 1.087r

No fix yet

Description

More vulnerabilities in gx works3

See all →