Security Advisory

CVE-2022-25164

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-11-24 23:21:25
Last updated 2025-04-25 17:52:48
Assigner Mitsubishi
CVSS score 8.6
State PUBLISHED

Description

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Electric MX OPC UA Module Configurator-R versions 1.08J and prior allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers can gain unauthorized access to the MELSEC CPU module and the MELSEC OPC UA server module.