Advisories · Technology

Mitsubishi Electric Corporation GX Works3.

Every CVE that names Mitsubishi Electric Corporation GX Works3 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-15688 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting
- Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation Motion Control Setting
- Authentication bypass
Not analysed yet 17 Sept 2026
CVE-2023-6943 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unsafe reflection in Mitsubishi Electric Corporation EZSocket and others
- Mitsubishi Electric Corporation EZSocket
- Mitsubishi Electric Corporation GT Designer3 Version1(GOT1000)
- Code injection
Not analysed yet 30 Jan 2024
CVE-2023-6942 CVE record

CVSS 7.5 High

Missing authentication in Mitsubishi Electric Corporation EZSocket and others
- Mitsubishi Electric Corporation EZSocket
- Mitsubishi Electric Corporation GT Designer3 Version1(GOT1000)
- Authentication bypass
Not analysed yet 30 Jan 2024
CVE-2023-5247 CVE record

CVSS 7.8 High

External control of a file path in Mitsubishi Electric Corporation GX Works3 and others
- Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation MELSOFT iQ AppPortal
- Path traversal
Not analysed yet 30 Nov 2023
CVE-2023-4088 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Malicious Code Execution Vulnerability in FA Engineering Software Products
- Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation AL-PCS/WIN-E
- Broken access control
Not analysed yet 20 Sept 2023
CVE-2022-29833 CVE record

CVSS 6.8 Medium

Insufficiently protected credentials in Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation GX Works3
- Hard-coded credentials
Not analysed yet 24 Nov 2022
CVE-2022-29832 CVE record

CVSS 3.7 Low

Mitsubishi Electric Corporation GX Works3: Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric…
- Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation GX Works2
- CWE-316
Not analysed yet 24 Nov 2022
CVE-2022-29831 CVE record

CVSS 7.5 High

Hard-coded password in Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation GX Works3
- Hard-coded credentials
Not analysed yet 24 Nov 2022
CVE-2022-29830 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3 and others
- Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation Motion Control Setting(GX Works3 related software)
- Hard-coded credentials
Not analysed yet 24 Nov 2022
CVE-2022-29829 CVE record

CVSS 6.8 Medium

Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3 and others
- Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation GT Designer3 Version1 (GOT2000)
- Hard-coded credentials
Not analysed yet 24 Nov 2022
CVE-2022-29828 CVE record

CVSS 6.8 Medium

Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation GX Works3
- Hard-coded credentials
Not analysed yet 24 Nov 2022
CVE-2022-29827 CVE record

CVSS 6.8 Medium

Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation GX Works3
- Hard-coded credentials
Not analysed yet 24 Nov 2022
CVE-2022-29826 CVE record

CVSS 6.8 Medium

Cleartext storage of sensitive information in Mitsubishi Electric Corporation GX Works3 and others
- Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation Motion Control Setting(GX Works3 related software)
- Information disclosure
Not analysed yet 24 Nov 2022
CVE-2022-29825 CVE record

CVSS 5.6 Medium

Hard-coded password in Mitsubishi Electric Corporation GX Works3 and others
- Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation GT Designer3 Version1 (GOT2000)
- Hard-coded credentials
Not analysed yet 24 Nov 2022
CVE-2022-25164 CVE record

CVSS 8.6 High

Cleartext storage of sensitive information in Mitsubishi Electric Corporation GX Works3 and others
- Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation MX OPC UA Module Configurator-R
- Information disclosure
Not analysed yet 24 Nov 2022
CVE-2021-20588 CVE record

CVSS 7.5 High

Mitsubishi Electric Corporation CPU Module Logging…: Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric…
- Mitsubishi Electric Corporation CPU Module Logging Configuration Tool
- Mitsubishi Electric Corporation CW Configurator
- CWE-130
Not analysed yet 19 Feb 2021
CVE-2021-20587 CVE record

CVSS 7.5 High

Heap-based buffer overflow in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool and others
- Mitsubishi Electric Corporation CPU Module Logging Configuration Tool
- Mitsubishi Electric Corporation CW Configurator
- Memory corruption
Not analysed yet 19 Feb 2021