← volver
CVE-2022-25164

CVE-2022-25164

CVSS 8.6 HIGHEPSS 0.8%CWE-312
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Electric MX OPC UA Module Configurator-R versions 1.08J and prior allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers can gain unauthorized access to the MELSEC CPU module and the MELSEC OPC UA server module.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Productos afectados
Mitsubishi Electric Corporation · GX Works3Mitsubishi Electric Corporation · MX OPC UA Module Configurator-R

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://jvn.jp/vu/JVNVU97244961/index.htmlhttps://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf