Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2022-23129

UNKNOWN
Published 2022-01-21T18:17:31
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2022-23129. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally. This is because when configuration information of GridWorX, a database linkage function of GENESIS64 and MC Works64, is exported to a CSV file, the authentication information is saved in plaintext, and an attacker who can access this CSV file can gain the authentication information.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-v8qm-c69g-x57q

Advisory Details

Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally. This is because when configuration information of GridWorX, a database linkage function of GENESIS64 and MC Works64, is exported to a CSV file, the authentication information is saved in plaintext, and an attacker who can access this CSV file can gain the authentication information.

CVSS Scoring

CVSS Score

5.0

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-23129
WEB https://jvn.jp/vu/JVNVU95403720/index.html
WEB https://us-cert.cisa.gov/ics/advisories/icsa-22-020-01
WEB https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-027_en.pdf

Advisory provided by GitHub Security Advisory Database. Published: January 22, 2022, Modified: January 28, 2022

References

https://jvn.jp/vu/JVNVU95403720/index.html
https://us-cert.cisa.gov/ics/advisories/icsa-22-020-01
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-027_en.pdf
Published: 2022-01-21T18:17:31
Last Modified: 2024-08-03T03:36:19.744Z
Copied to clipboard!