CVE-2025-11009CWE-312

Information Disclosure Vulnerability in GT Designer3

Medium · published December 17, 2025

CVSS v3.1
5.1
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all versions and Mitsubishi Electric GT Designer3 Version1 (GOT1000) all versions allows a local unauthenticated attacker to obtain plaintext credentials from the project file for GT Designer3. This could allow the attacker to operate illegally GOT2000 series or GOT1000 series by using the obtained credentials.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00094 · 0.6th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2025-12-17T00:55Z
EPSS history
Timeline
  • 17 DEC 00:55Z
    Information Disclosure Vulnerability in GT Designer3
    cvelistv5