CVE-2022-29831

🗓️ 24 Nov 2022 23:36:18Reported by MitsubishiType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 70 Views

Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the software for programming Mitsubishi Electric GX Works3 lies in the ability to use strictly encrypted user data, which allows a intruder to obtain information about the project files for security modules on the CPU.	22 Feb 202300:00	–	bdu_fstec
Circl	CVE-2022-29831	5 Dec 202212:02	–	circl
CNNVD	Mitsubishi Electric GX Works3 信任管理问题漏洞	25 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-29831	24 Nov 202223:36	–	cvelist
EUVD	EUVD-2022-34149	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric FA Engineering Software (Update C)	5 Dec 202207:00	–	ics
NVD	CVE-2022-29831	25 Nov 202200:15	–	nvd
OSV	CVE-2022-29831	25 Nov 202200:15	–	osv
Prion	Hardcoded credentials	25 Nov 202200:15	–	prion
Positive Technologies	PT-2022-6320 · Mitsubishi · Gx Works3	24 Nov 202200:00	–	ptsecurity

NVD

Node

mitsubishielectric gx_works3Range1.015r–1.086q

mitsubishielectric gx_works3Range1.087r≥

[
  {
    "defaultStatus": "unaffected",
    "product": "GX Works3",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "from 1.015R to 1.095Z"
      }
    ]
  }
]

Source	Link
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf
cisa	www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
jvn	www.jvn.jp/vu/JVNVU97244961