Known vulnerabilities in GX Works3

Vendor: Mitsubishi Electric
Software: GX Works3
Software CPE: cpe:2.3:a:mitsubishi_electric:gx_works3:*:*:*:*:*:*:*:*
Website: https://www.mitsubishielectric.com/
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GX Works3 GX Works3 is affected by 20 known vulnerabilities: 3 high, 13 medium, 4 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85936 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2023-6943		 CWE-470 High
No
No
 - 31.01.2024 SB2024013127
#VU85933 - Missing Authentication for Critical Function
CVE-2023-6942		 CWE-306 Medium
No
No
 - 31.01.2024 SB2024013127
#VU83865 - External Control of File Name or Path
CVE-2023-5247		 CWE-73 High
No
No
 - 05.12.2023 SB2023120514
#VU81205 - Incorrect Default Permissions
CVE-2023-4088		 CWE-276 Low
No
No
 - 27.09.2023 SB2023092705
#VU69749 - Insufficiently Protected Credentials
CVE-2022-29833		 CWE-522 Medium
No
No
 - 30.11.2022 SB2022113011
#VU69748 - Cleartext Storage of Sensitive Information
CVE-2022-29832		 CWE-312 Low
No
No
 - 30.11.2022 SB2022113011
#VU69747 - Use of Hard-coded Password
CVE-2022-29831		 CWE-259 Low
No
No
 - 30.11.2022 SB2022113011
#VU69746 - Use of Hard-coded Cryptographic Key
CVE-2022-29830		 CWE-321 Medium
No
No
 - 30.11.2022 SB2022113011
#VU69745 - Use of Hard-coded Cryptographic Key
CVE-2022-29829		 CWE-321 Medium
No
No
 - 30.11.2022 SB2022113011
#VU69744 - Use of Hard-coded Cryptographic Key
CVE-2022-29828		 CWE-321 Medium
No
No
 - 30.11.2022 SB2022113011
#VU69743 - Use of Hard-coded Cryptographic Key
CVE-2022-29827		 CWE-321 Medium
No
No
 - 30.11.2022 SB2022113011
#VU69742 - Cleartext Storage of Sensitive Information
CVE-2022-29826		 CWE-312 Medium
No
No
 1.090U 30.11.2022 SB2022113010
#VU69741 - Use of Hard-coded Password
CVE-2022-29825		 CWE-259 Low
No
No
 - 30.11.2022 SB2022113011
#VU69740 - Cleartext Storage of Sensitive Information
CVE-2022-25164		 CWE-312 High
No
No
 - 30.11.2022 SB2022113011
#VU50840 - Improper Handling of Length Parameter Inconsistency
CVE-2021-20588		 CWE-130 Medium
No
No
 1.072A 22.02.2021 SB2021022220
#VU50839 - Heap-based Buffer Overflow
CVE-2021-20587		 CWE-122 Medium
No
No
 1.072A 22.02.2021 SB2021022220
#VU32955 - Permissions, Privileges, and Access Controls
CVE-2020-14496		 CWE-264 Medium
No
No
 1.065T 31.07.2020 SB2020073114
#VU32954 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-14523		 CWE-22 Medium
No
No
 1.065T 31.07.2020 SB2020073115
#VU29430 - Resource exhaustion
CVE-2020-5603		 CWE-400 Medium
No
No
 1.060N 01.07.2020 SB2020070113
#VU29429 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-5602		 CWE-611 Medium
No
No
 1.060N 01.07.2020 SB2020070113