CVE-2022-29826

Reference Links

• https://jvn.jp/vu/JVNVU97244961/index.html
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf
• https://www.cisa.gov/news-events/ics-advisories/icsa-22-333-05 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• ICSA-22-333-05

Frequently Asked Questions

• What is CVE-2022-29826?

  CVE-2022-29826 is a vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting software that allows a remote attacker to disclose sensitive information.

• Which versions of Mitsubishi Electric GX Works3 and Motion Control Setting software are affected by CVE-2022-29826?

  The affected versions of Mitsubishi Electric GX Works3 range from 1.000A to 1.087R, while the affected versions of Motion Control Setting software range from 1.000A to 1.042U.

• What is the severity of CVE-2022-29826?

  CVE-2022-29826 has a severity rating of 7.5 (High).

• How can an attacker exploit CVE-2022-29826?

  An attacker can exploit CVE-2022-29826 remotely and without authentication to disclose sensitive information.

• Are there any known fixes or mitigations for CVE-2022-29826?

  Yes, Mitsubishi Electric has provided a security advisory with recommendations for mitigating the vulnerability. Please refer to the provided references for more information.