CVE-2022-25164: Mitsubishielectric Gx WORKS3

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Electric MX OPC UA Module Configurator-R versions 1.08J and prior allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers can gain unauthorized access to the MELSEC CPU module and the MELSEC OPC UA server module.

Affected products

• Mitsubishielectric Gx WORKS3: from 1.000a, up to and including 1.011m; from 1.015r, up to and including 1.086q; from 1.087r
• Mitsubishielectric Mx Opc Ua Module Configurator-R: affected versions not specified

Published 2022-11-25. Last modified 2026-06-17.