{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-02T12:06:10.754","vulnerabilities":[{"cve":{"id":"CVE-2022-29832","sourceIdentifier":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","published":"2022-11-25T00:15:10.507","lastModified":"2026-06-17T04:40:47.527","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer versions 8.40S and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could obtain information about the project file for MELSEC safety CPU modules or project file for MELSEC Q/FX/L series with security setting."},{"lang":"es","value":"Vulnerabilidad de almacenamiento de texto sin cifrar de información confidencial en memoria en Mitsubishi Electric Corporation GX Works3 versiones 1.015R y posteriores, GX Works2 todas las versiones y GX Developer versiones 8.40S y posteriores permite que un atacante remoto no autenticado revele información sensible. Como resultado, los usuarios no autenticados podrían obtener información sobre el archivo de proyecto para los módulos de CPU de seguridad de MELSEC o el archivo de proyecto para la serie MELSEC Q/FX/L con configuración de seguridad."}],"affected":[{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","affectedData":[{"vendor":"Mitsubishi Electric Corporation","product":"GX Works3","defaultStatus":"unaffected","versions":[{"version":"1.015R and later","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"GX Works2","defaultStatus":"unaffected","versions":[{"version":"all versions","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"GX Developer","defaultStatus":"unaffected","versions":[{"version":"8.40S and later","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-25T17:36:25.700934Z","id":"CVE-2022-29832","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","type":"Secondary","description":[{"lang":"en","value":"CWE-316"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*","versionStartIncluding":"1.015r","versionEndIncluding":"1.086q","matchCriteriaId":"56BD062B-0D41-42E2-B9EF-B7FBB514CFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*","versionStartIncluding":"1.087r","matchCriteriaId":"C7C6A654-1B83-4743-8DDE-B8C5AA5C4D2A"}]}]}],"references":[{"url":"https://jvn.jp/vu/JVNVU97244961","source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05","source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"},{"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf","source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","tags":["Mitigation","Vendor Advisory"]},{"url":"https://jvn.jp/vu/JVNVU97244961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}}]}