CVE-2022-29832

Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer versions 8.40S and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could obtain information about the project file for MELSEC safety CPU modules or project file for MELSEC Q/FX/L series with security setting.

• CWE-316
• CWE-312

• https://jvn.jp/vu/JVNVU97244961Third Party Advisory, VDB Entry
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdfMitigation, Vendor Advisory
• https://jvn.jp/vu/JVNVU97244961Third Party Advisory, VDB Entry
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-05
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-015_en.pdfMitigation, Vendor Advisory

Published

Nov 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29827Use of Hard-coded Cryptographic Key vulnerability in Mitsubi…7.5
• CVE-2022-29828Use of Hard-coded Cryptographic Key vulnerability in Mitsubi…7.5
• CVE-2022-29829Use of Hard-coded Cryptographic Key vulnerability in Mitsubi…7.5
• CVE-2022-2983The Salat Times WordPress plugin before 3.2.2 does not sanit…4.8
• CVE-2022-29830Use of Hard-coded Cryptographic Key vulnerability in Mitsubi…9.1
• CVE-2022-29831Use of Hard-coded Password vulnerability in Mitsubishi Elect…7.5
• CVE-2022-29833Insufficiently Protected Credentials vulnerability in Mitsub…6.5
• CVE-2022-29834Improper Limitation of a Pathname to a Restricted Directory …7.5
• CVE-2022-29835WD Discovery software executable files were signed with an u…5.3
• CVE-2022-29836Improper Limitation of a Pathname to a Restricted Directory …4.3
• CVE-2022-29837A path traversal vulnerability was addressed in Western Digi…7.8
• CVE-2022-29838Improper Authentication vulnerability in the encrypted volum…4.6