CVE-2025-3784: Mitsubishi Electric Corporation Gx WORKS2

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext from project files. As a result, the attacker may be able to open project files protected by user authentication using disclosed credential information, and obtain or modify project information.

Affected products

• Mitsubishi Electric Corporation Gx WORKS2: any version

Published 2025-11-27. Last modified 2026-06-17.