CVE-2025-11009: Information Disclosure Vulnerability in GT Designer3
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all versions and Mitsubishi Electric GT Designer3 Version1 (GOT1000) all versions allows a local unauthenticated attacker to obtain plaintext credentials from the project file for GT Designer3. This could allow the attacker to operate illegally GOT2000 series or GOT1000 series by using the obtained credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11009?
CVE-2025-11009 is considered a high severity vulnerability due to the potential exposure of sensitive credentials.
How do I fix CVE-2025-11009?
To fix CVE-2025-11009, it is recommended to upgrade to the latest version of Mitsubishi Electric GT Designer3 that addresses this vulnerability.
What types of information are affected by CVE-2025-11009?
CVE-2025-11009 affects the cleartext storage of sensitive information, specifically plaintext credentials in project files.
Who is affected by CVE-2025-11009?
CVE-2025-11009 affects all versions of Mitsubishi Electric GT Designer3, both GOT2000 and GOT1000.
Can an attacker exploit CVE-2025-11009 remotely?
No, CVE-2025-11009 requires local access, as it allows unauthenticated attackers to access sensitive information from the system.