CVE-2025-3784: Information Disclosure Vulnerability in GX Works2
Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext from project files. As a result, the attacker may be able to open project files protected by user authentication using disclosed credential information, and obtain or modify project information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3784?
CVE-2025-3784 is considered a high-severity vulnerability due to its potential for credential disclosure.
How do I fix CVE-2025-3784?
To fix CVE-2025-3784, ensure that sensitive information is stored in encrypted formats instead of plaintext.
What are the potential impacts of CVE-2025-3784?
The potential impacts of CVE-2025-3784 include unauthorized access to project files and exposure of sensitive credentials.
Which versions of GX Works2 are affected by CVE-2025-3784?
All versions of Mitsubishi GX Works2 are affected by CVE-2025-3784.
How can I mitigate the risks associated with CVE-2025-3784?
To mitigate risks associated with CVE-2025-3784, implement user authentication and secure storage practices for sensitive information.