CVE-2025-3784: medium-severity vulnerability in Mitsubishi Electric Corporation GX Works2
Information Disclosure Vulnerability in GX Works2
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.1%
Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext from project files. As a result, the attacker may be able to open project files protected by user authentication using disclosed credential information, and obtain or modify project information.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Mitsubishi Electric Corporation · GX Works2Related CVEs — Mitsubishi Electric Corporation GX Works2
In the same product, most dangerous first.