description: Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C and Motion Control Setting(GX Works3 related software) versions from 1.035M to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.
problem types: CWE-321 Use of Hard-coded Cryptographic Key
affected:
{
defaultStatus: unaffected
product: GX Works3
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: from 1.000A to 1.090U
}
{
defaultStatus: unaffected
product: GT Designer3 Version1 (GOT2000)
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: from 1.122C to 1.290C
}
{
defaultStatus: unaffected
product: Motion Control Setting(GX Works3 related software)
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: from 1.035M to 1.042U
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL