CVE-2025-3784CWE-312

CVE-2025-3784

Medium · published November 27, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext from project files. As a result, the attacker may be able to open project files protected by user authentication using disclosed credential information, and obtain or modify project information.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00102 · 0.9th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2025-11-27T10:16Z
References (3)
EPSS history
Timeline
  • 27 NOV 04:28Z
    Information Disclosure Vulnerability in GX Works2
    cvelistv5