CVE-2026-15688criticalCWE-303

CVE-2026-15688: fallo crítico en Mitsubishi Electric Corporation GX Works3

Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear GX Works3+ Monitorear Motion Control Setting

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.2epss 0.2%
Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in memory, and thereby may be able to view, tamper with, destroy, or delete control programs.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:H/SA:H
Productos afectados
Mitsubishi Electric Corporation · GX Works3Mitsubishi Electric Corporation · Motion Control Setting
CVEs relacionadas — Mitsubishi Electric Corporation GX Works3

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-20588HIGHCVE-2021-20588EPSS 6.9%CVE-2021-20587HIGHCVE-2021-20587EPSS 3.9%CVE-2023-6943CRITICALCVE-2023-6943EPSS 2.1%CVE-2022-29831HIGHCVE-2022-29831EPSS 1.4%CVE-2022-29830CRITICALCVE-2022-29830EPSS 1.4%CVE-2022-29829MEDIUMCVE-2022-29829EPSS 1.2%