Mitsubishi Electric FA Engineering Software (Update C)
Successful exploitation of these vulnerabilities could allow unauthorized users to gain access to the MELSEC iQ-R/F/L series CPU modules and the MELSEC iQ-R series OPC UA server module or to view and execute programs or view project files without permissions.
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-29833US | medium6.5 | — | ||
Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote unauthenticated attacker to disclose sensi… | ||||
| CVE-2022-29832US | medium6.5OT elevated | — | ||
Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer v… | ||||
| CVE-2022-29831US | high7.5OT elevated | — | ||
Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unauthenticated attacker to obtain information… | ||||
| CVE-2022-29830US | critical9.1OT elevated | — | ||
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Setting(GX Works3 related software) versions f… | ||||
| CVE-2022-29829US | high7.5OT elevated | — | ||
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, M… | ||||
| CVE-2022-29828US | high7.5OT elevated | — | ||
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive inf… | ||||
| CVE-2022-29827US | high7.5OT elevated | — | ||
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive inf… | ||||
| CVE-2022-29826US | high7.5OT elevated | — | ||
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) vers… | ||||
| CVE-2022-29825US | high7.5OT elevated | — | ||
Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, and MT Wor… | ||||
| CVE-2022-25164US | high7.5OT elevated | — | ||
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Electric MX OPC UA Module Configurator-R ver… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-333-05 JSONself
- ICSA Advisory ICSA-22-333-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (33)
- MitigationGT Designer3 Version1 (GOT2000)
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGT Designer3 Version1 (GOT2000)
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Developer
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works2
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMT Works2
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMT Works2
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMX OPC UA Module Configurator-R
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMotion Control Settings (GX Works3 related software)
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMotion Control Settings (GX Works3 related software)
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMotion Control Settings (GX Works3 related software)
Encrypt project files and security keys when sending or receiving over the Internet.
- FixedGX Works3
GX Works3:
- FixedGX Works3
GX Works3:
- FixedGX Works3
GX Works3:
- FixedGX Works3
GX Works3:
- FixedGX Works3
GX Works3:
- FixedGX Works3
GX Works3:
- FixedGX Works3
GX Works3:
- FixedGX Works3
GX Works3:
- FixedGX Works3
GX Works3:
- FixedGX Works3
GX Works3:
- FixedMT Works2
MT Works2:
- FixedMT Works2
MT Works2:
- FixedMX OPC UA Module Configurator-R
MX OPC UA Module Configurator-R:
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan