CVE-2022-29826 - CVE House

Back to Database

Status published Medium CVE-2022-29826

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX...

6.8 CVSS

Vulnerability Description

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-29826

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Mitsubishi Electric Corporation

View All →

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...

Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module

Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module

Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

Affected Vendor

Mitsubishi Electric Corporation

View all reports →

Affected Software

GX Works3, Motion Control Setting(GX Works3 related software)

Vulnerable Versions:

from 1.000A to 1.087R, from 1.000A to 1.042U

Timeline

Official Publish: November 24th, 2022

Last Modified: April 25th, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1005 Data from Local System

T1552 Unsecured Credentials

Credential Access

T1530 Data from Cloud Storage

T1078 Valid Accounts

T1041 Exfiltration Over C2 Channel