CVE-2025-3784

MEDIUM

5.5

Description

Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext from project files. As a result, the attacker may be able to open project files protected by user authentication using disclosed credential information, and obtain or modify project information.

CVE Details

CVSS v3.1 Score5.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published11/27/2025

Last Modified12/8/2025

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-312

References

https://jvn.jp/vu/JVNVU95288056/(Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp)

https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-01(Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp)

https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-016_en.pdf(Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.