Lucene search

[email protected]CVE-2022-29828

HistoryNov 25, 2022 - 12:15 a.m.

CVE-2022-29828

2022-11-2500:15:00

CWE-798

[email protected]

web.nvd.nist.gov

cve-2022-29828

hard-coded cryptographic key

vulnerability

mitsubishi electric gx works3

remote unauthenticated

sensitive information disclosure

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.8%

JSON

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers may view programs and project file or execute programs illegally.

CPENameOperatorVersion
mitsubishielectric:gx_works3mitsubishielectric gx works3eq*
mitsubishielectric:gx_works3mitsubishielectric gx works3le1.086q
mitsubishielectric:gx_works3mitsubishielectric gx works3le1.011m

CPE	Name	Operator	Version
mitsubishielectric:gx_works3	mitsubishielectric gx works3	eq	*
mitsubishielectric:gx_works3	mitsubishielectric gx works3	le	1.086q
mitsubishielectric:gx_works3	mitsubishielectric gx works3	le	1.011m

References

jvn.jp/vu/JVNVU97244961/index.html

www.cisa.gov/uscert/ics/advisories/icsa-22-333-05

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.8%

JSON

Related for CVE-2022-29828

prion1 ics1