CVE-2025-3784

Summary

Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext from project files. As a result, the attacker may be able to open project files protected by user authentication using disclosed credential information, and obtain or modify project information.

Affected Software

Weaknesses

• CWE-312: CWE-312 Cleartext Storage of Sensitive Information

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-016_en.pdf
• https://jvn.jp/vu/JVNVU95288056/
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-01

• ←Previous
• Next→