Priority LOW 32
Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote unauthenticated attacker to disclose sensitive information.
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.01082 · Published 2022-11-24 · No fix listed CWE-522
Priority LOW 30
Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer versions 8.40S and later allows a remote…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00671 · Published 2022-11-24 · No fix listed CWE-316
Priority MEDIUM 42
Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unauthenticated attacker to obtain information about the project file for MELSEC safety…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01417 · Published 2022-11-24 · No fix listed CWE-259
Priority MEDIUM 50
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.065T allows a remote una…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01362 · Published 2022-11-24 · No fix listed CWE-321
Priority LOW 35
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, Motion Control Setting(GX Works3 related…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01164 · Published 2022-11-24 · No fix listed CWE-321
Priority LOW 35
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01164 · Published 2022-11-24 · No fix listed CWE-321
Priority LOW 35
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01164 · Published 2022-11-24 · No fix listed CWE-321
Priority LOW 34
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remo…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00772 · Published 2022-11-24 · No fix listed CWE-312
Priority LOW 33
Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allow…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00492 · Published 2022-11-24 · No fix listed CWE-259
Priority MEDIUM 45
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Electric MX OPC UA Module Configurator-R versions 1.08J and prior allows a remote un…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00904 · Published 2022-11-24 · No fix listed CWE-312