Medium severity6.8NVD Advisory· Published Nov 25, 2022· Updated Jun 17, 2026

CVE-2022-29833

Description

Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could access to MELSEC safety CPU modules illgally.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mitsubishielectric/GX Works3llm-fuzzy
Range: >=1.015R
Mitsubishielectric/GX Works2cpe-rescue
Range: 1.015R and later

Patches

Vulnerability mechanics

References

jvn.jp/vu/JVNVU97244961nvdThird Party AdvisoryVDB Entry
www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdfnvdMitigationVendor Advisory
www.cisa.gov/uscert/ics/advisories/icsa-22-333-05nvd

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000