CVE-2022-29830

Summary

CVE	CVE-2022-29830
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-11-25 00:15:00 UTC
Updated	2023-06-29 08:15:00 UTC
Description	Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Motion Control Setting(GX Works3 related software) versions from 1.000A and later allows a remote unauthenticated attacker to disclose or tamper with sensitive information. As a result, unauthenticated attackers may obtain information about project files illegally.

Risk And Classification

Problem Types: CWE-798

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Mitsubishielectric	Gx Works3	All	All	All	All
Application	Mitsubishielectric	Gx Works3	All	All	All	All
Application	Mitsubishielectric	Gx Works3	All	All	All	All

References

Reference	Source	Link	Tags
www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf	MISC	www.mitsubishielectric.com
JVNVU#97244961: 三菱電機製FAエンジニアリングソフトウェア製品における複数の脆弱性	MISC	jvn.jp
Mitsubishi Electric FA Engineering Software \| CISA	MISC	www.cisa.gov
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

591227 Mitsubishi Electric FA Engineering Software GXWorks3 Multiple Vulnerabilities (ICSA-22-333-05)