CVE-2022-29825

CVSS 5.6 MEDIUMEPSS 0.5%CWE-259

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.6EPSS 0.5%KEV nãoPoC —Patch referenciado

Ciclo de vida

24 nov 2022Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allows an unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Produtos afetados

Mitsubishi Electric Corporation · GT Designer3 Version1 (GOT2000)Mitsubishi Electric Corporation · GX Works3 Mitsubishi Electric Corporation · MT Works2

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://jvn.jp/vu/JVNVU97244961/index.html https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05 https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf