CVE-2022-29832lowCWE-316

CVE-2022-29832: falha de baixa gravidade em Mitsubishi Electric Corporation GX Works3

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar GX Works3+ Monitorar GX Works2

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.7epss 0.7%
Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer versions 8.40S and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could obtain information about the project file for MELSEC safety CPU modules or project file for MELSEC Q/FX/L series with security setting.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Mitsubishi Electric Corporation · GX DeveloperMitsubishi Electric Corporation · GX Works2Mitsubishi Electric Corporation · GX Works3
CVEs relacionadas — Mitsubishi Electric Corporation GX Works3

No mesmo produto, das mais perigosas para as menos.

CVE-2021-20588HIGHCVE-2021-20588EPSS 6.9%CVE-2021-20587HIGHCVE-2021-20587EPSS 3.9%CVE-2023-6943CRITICALCVE-2023-6943EPSS 2.1%CVE-2022-29831HIGHCVE-2022-29831EPSS 1.4%CVE-2022-29830CRITICALCVE-2022-29830EPSS 1.4%CVE-2022-29829MEDIUMCVE-2022-29829EPSS 1.2%