CVE-2022-29830

🗓️ 24 Nov 2022 23:23:51Reported by MitsubishiType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 78 Views

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 version

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the software access control mechanism for Mitsubishi Electric GX Works3 allows a intruder to execute arbitrary code.	24 Dec 202200:00	–	bdu_fstec
Circl	CVE-2022-29830	5 Dec 202212:02	–	circl
CNNVD	Mitsubishi Electric GX Works3 信任管理问题漏洞	25 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-29830	24 Nov 202223:23	–	cvelist
EUVD	EUVD-2022-34148	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric FA Engineering Software (Update C)	5 Dec 202207:00	–	ics
NVD	CVE-2022-29830	25 Nov 202200:15	–	nvd
OSV	CVE-2022-29830	25 Nov 202200:15	–	osv
Prion	Hardcoded credentials	25 Nov 202200:15	–	prion
Positive Technologies	PT-2022-5974 · Mitsubishi · Motion Control Setting +1	24 Nov 202200:00	–	ptsecurity

NVD

Node

mitsubishielectric gx_works3Range1.000a–1.011m

mitsubishielectric gx_works3Range1.015r–1.086q

mitsubishielectric gx_works3Range1.087r≥

[
  {
    "defaultStatus": "unaffected",
    "product": "GX Works3",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "from 1.000A to 1.095Z"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Motion Control Setting(GX Works3 related software)",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "from 1.000A to 1.065T"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
jvn	www.jvn.jp/vu/JVNVU97244961/index.html
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf