CVE-2022-29830: Mitsubishi Electric Corporation GX Works3, слаба

Описание

Оригинално описание

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.065T allows a remote unauthenticated attacker to disclose or tamper with sensitive information. As a result, unauthenticated attackers may obtain information about project files illegally.

Засегнати продукти

• Mitsubishi Electric Corporation GX Works3: from 1.000A to 1.095Z
• Mitsubishi Electric Corporation Motion Control Setting(GX Works3 related software): from 1.000A to 1.065T

Вид слабост

• CWE-321 Използване на твърдо кодиран криптографски ключ

История

Други уязвимости в Mitsubishi Electric Corporation GX Works3

• 9.2CVE-2026-15688
• 9.8CVE-2023-6943
• 7.5CVE-2023-6942
• 7.8CVE-2023-5247
• 9.3CVE-2023-4088

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-29830
• https://nvd.nist.gov/vuln/detail/CVE-2022-29830
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf
• https://jvn.jp/vu/JVNVU97244961/index.html
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05