6.8
Medium
CVE-2022-29829 Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT…
Description
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, Motion Control Setting(GX Works3 related software) versions from 1.035M to 1.042U, and MT Works2 versions from 1.100E to 1.200J allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GX Works3 | Versions not published | |
| GT Designer3 Version1 (GOT2000) | Versions not published | |
| Motion Control Setting(GX Works3 related software) | Versions not published | |
| MT Works2 | Versions not published |
Other CVEs of GX Works3
The 17 CVEs of GX Works3 →
CVE-2026-15688
Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control…
9.2
Critical
CVE-2023-6943
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi…
9.8
Critical
CVE-2023-6942
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to…
7.5
High
CVE-2023-5247
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA…
7.8
High