CVE-2022-29825

🗓️ 24 Nov 2022 23:21:54Reported by MitsubishiType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 99 Views

CVE-2022-29825 Mitsubishi Electric GX Works3 and GT Designer3 versions 1.000A-1.090U, 1.122C-1.290C have hard-coded password vulnerability allowing unauthorized access

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	Mitsubishi Electric GX Works3 Info Disclosure	23 Mar 202300:00	–	bdu_fstec
Circl	CVE-2022-29825	30 Mar 202320:05	–	circl
CNNVD	Mitsubishi Electric GX Works3 Trust Management Vulnerability	25 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-29825	24 Nov 202223:21	–	cvelist
EUVD	EUVD-2022-34143	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric FA Engineering Software (Update C)	5 Dec 202207:00	–	ics
NVD	CVE-2022-29825	25 Nov 202200:15	–	nvd
osv_cve	CVE-2022-29825	25 Nov 202200:15	–	osv_cve
Prion	Hardcoded credentials	25 Nov 202200:15	–	prion
Positive Technologies	PT-2022-6456	24 Nov 202200:00	–	ptsecurity

NVD

Vulners

Node

mitsubishielectric gx_works3Range1.000a–1.011m

mitsubishielectric gx_works3Range1.015r–1.086q

mitsubishielectric gx_works3Range1.087r≥

[
  {
    "defaultStatus": "unaffected",
    "product": "GX Works3",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "from 1.000A to 1.090U"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GT Designer3 Version1 (GOT2000)",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "from 1.122C to 1.290C"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MT Works2",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "from 1.100E to 1.200J"
      }
    ]
  }
]

Source	Link
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf
jvn	www.jvn.jp/vu/JVNVU97244961/index.html
cisa	www.cisa.gov/uscert/ics/advisories/icsa-22-333-05