Description
Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext from project files. As a result, the attacker may be able to open project files protected by user authentication using disclosed credential information, and obtain or modify project information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mitsubishi Electric | GX Works2 | All versions | — |
Advisories 1
- ICSA-25-338-01 Mitsubishi Electric GX Works2 CISA ICS & IT advisories · Dec 4, 2025
References
- https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-016_en.pdf vendor-advisory
- https://jvn.jp/vu/JVNVU95288056/ government-resource
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-01 government-resource