CVE-2022-29825 - CVE House

Back to Database

Status published Medium CVE-2022-29825

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3...

5.6 CVSS

Vulnerability Description

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allows an unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-29825

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Mitsubishi Electric Corporation

View All →

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...

Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module

Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module

Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

Affected Vendor

Mitsubishi Electric Corporation

View all reports →

Affected Software

GX Works3, GT Designer3 Version1 (GOT2000), MT Works2

Vulnerable Versions:

from 1.000A to 1.090U, from 1.122C to 1.290C, from 1.100E to 1.200J

Timeline

Official Publish: November 24th, 2022

Last Modified: November 7th, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1552 Unsecured Credentials

Credential Access

T1005 Data from Local System

T1078 Valid Accounts