CVE-2022-29827: High severity mitsubishi electric gx works3 vulnerability
Published Nov 24, 2022
·Updated
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers may view programs and project files or execute programs illegally.
Affected Software
23 affected components
Mitsubishielectric Gx Works3>=1.000a<=1.011m
Mitsubishielectric Gx Works3>=1.015r<=1.086q
Mitsubishielectric Gx Works3>=1.087r
Mitsubishi Electric GX Works3:
1.000A to 1.011M (affected by CVE-2022-25164, CVE-2022-29825, CVE-2022-29826, CVE-2022-29827, CVE-2022-29828, CVE-2022-29829, CVE-2022-29830)
1.015R to 1.087R (affected by CVE-2022-25164, CVE-2022-29825, CVE-2022-29826, CVE-2022-29827, CVE-2022-29828, CVE-2022-29829, CVE-2022-29830, CVE-2022-29831, CVE-2022-29832, CVE-2022-29833)
1.090U (affected by CVE-2022-25164, CVE-2022-29825, CVE-2022-29827, CVE-2022-29828, CVE-2022-29829, CVE-2022-29830, CVE-2022-29831, CVE-2022-29832, CVE-2022-29833)
--------- Begin Update B Part 1 of 2 ---------
1.095Z (affected by CVE-2022-25164, CVE-2022-29827, CVE-2022-29828, CVE-2022-29830, CVE-2022-29831, CVE-2022-29832, CVE-2022-29833)
1.096A and later (affected by CVE-2022-29827, CVE-2022-29828, CVE-2022-29832, CVE-2022-29833)
Mitsubishi Electric 1.000A to 1.011M (affected by CVE-2022-25164, CVE-2022-29825, CVE-2022-29826, CVE-2022-29827, CVE-2022-29828, CVE-2022-29829, CVE-2022-29830)
Mitsubishi Electric 1.015R to 1.087R (affected by CVE-2022-25164, CVE-2022-29825, CVE-2022-29826, CVE-2022-29827, CVE-2022-29828, CVE-2022-29829, CVE-2022-29830, CVE-2022-29831, CVE-2022-29832, CVE-2022-29833)
Mitsubishi Electric 1.090U (affected by CVE-2022-25164, CVE-2022-29825, CVE-2022-29827, CVE-2022-29828, CVE-2022-29829, CVE-2022-29830, CVE-2022-29831, CVE-2022-29832, CVE-2022-29833)
--------- Begin Update B Part 1 of 2 ---------
Mitsubishi Electric 1.095Z (affected by CVE-2022-25164, CVE-2022-29827, CVE-2022-29828, CVE-2022-29830, CVE-2022-29831, CVE-2022-29832, CVE-2022-29833)
Mitsubishi Electric 1.096A and later (affected by CVE-2022-29827, CVE-2022-29828, CVE-2022-29832, CVE-2022-29833)
Mitsubishi Electric MX OPC UA Module Configurator-R: 1.08J and prior (affected by CVE-2022-25164)
: Mitsubishi Electric GX Works3: 1.000A to 1.011M (affected by CVE-2022-25164, CVE-2022-29825, CVE-2022-29826, CVE-2022-29827, CVE-2022-29828, CVE-2022-29829, and CVE-2022-29830)
: Mitsubishi Electric GX Works3: 1.015R to 1.087R (affected by CVE-2022-25164, CVE-2022-29825, CVE-2022-29826, CVE-2022-29827, CVE-2022-29828, CVE-2022-29829, CVE-2022-29830, CVE-2022-29831, CVE-2022-29832, and CVE-2022-29833)
: Mitsubishi Electric GX Works3: 1.090U (affected by CVE-2022-25164, CVE-2022-29825, CVE-2022-29827, CVE-2022-29828, CVE-2022-29829, CVE-2022-29830, CVE-2022-29831, CVE-2022-29832, and CVE-2022-29833)
: Mitsubishi Electric GX Works3: 1.095Z (affected by CVE-2022-25164, CVE-2022-29827, CVE-2022-29828, CVE-2022-29830, CVE-2022-29831, CVE-2022-29832, CVE-2022-29833)
: Mitsubishi Electric GX Works3: 1.096A and later (affected by CVE-2022-29827, CVE-2022-29828, CVE-2022-29832, CVE-2022-29833)
: Mitsubishi Electric MX OPC UA Module Configurator-R: 1.08J and prior (affected by CVE-2022-25164)
: Mitsubishi Electric GX Works2: All versions (affected by CVE-2022-29832)
: Mitsubishi Electric GX Developer: 8.40S or later (affected by CVE-2022-29832)
: Mitsubishi Electric GT Designer3 Version1 (GOT2000): 1.122C to 1.290C (affected by CVE-2022-29825 and CVE-2022-29829)
: Mitsubishi Electric Motion Control Settings (GX Works3 related software): 1.000A to 1.033K (affected by CVE-2022-29826 and CVE-2022-29830)
: Mitsubishi Electric Motion Control Settings (GX Works3 related software): 1.035M to 1.042U (affected by CVE-2022-29826, CVE-2022-29829, and CVE-2022-29830)
: Mitsubishi Electric Motion Control Settings (GX Works3 related software): 1.045X to 1.065T (affected by CVE-2022-29830)
: Mitsubishi Electric MT Works2: 1.100E to 1.200J (affected by CVE-2022-29825 and CVE-2022-29829)
Event History
Nov 24, 2022
CVE Published
via MITRE·11:22 PM
Data Sourced
via MITRE·11:22 PM
DescriptionSeverityWeakness
Nov 26, 2025
Data Sourced
via ICS·07:11 AM
SeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Mitsubishi Electric GX Works3 vulnerability?
The vulnerability ID for this Mitsubishi Electric GX Works3 vulnerability is CVE-2022-29827.
2
What is the severity of CVE-2022-29827?
The severity of CVE-2022-29827 is high, with a severity value of 7.5.
3
What is the affected software version range for CVE-2022-29827?
The affected software versions for CVE-2022-29827 are GX Works3 versions from 1.000A to 1.011M and versions from 1.015R to 1.086Q, including version 1.087R and later.
4
What is the impact of CVE-2022-29827?
CVE-2022-29827 allows a remote unauthenticated attacker to disclose sensitive information, resulting in the ability to view programs and project files or execute programs illegally.
5
Where can I find more information about CVE-2022-29827?
You can find more information about CVE-2022-29827 at the following references: [1] https://jvn.jp/vu/JVNVU97244961/index.html [2] https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05 [3] https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdf