CVE-2022-23129

Katalog CVE

CVSS 5.5 · Medium EPSS 0,19%

Kerentanan Cleartext Storage of Sensitive Information pada iconics genesis64, mitsubishielectric mc works64. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally. This is because when configuration information of GridWorX, a database linkage function of GENESIS64 and MC Works64, is exported to a CSV file, the authentication information is saved in plaintext, and an attacker who can access this CSV file can gain the authentication information.

Rincian

Terbit di NVD

21 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-312: Cleartext Storage of Sensitive Information

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-027_en.pdf mitigasi · advisory vendor
• https://jvn.jp/vu/JVNVU95403720/index.html mitigasi · advisory pihak ketiga · vdb entry
• https://us-cert.cisa.gov/ics/advisories/icsa-22-020-01 mitigasi · advisory pihak ketiga · pemerintah AS · vdb entry