{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"GX Works2","vendor":"Mitsubishi Electric Corporation","versions":[{"status":"affected","version":"All versions"}]}],"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext from project files. As a result, the attacker may be able to open project files protected by user authentication using disclosed credential information, and obtain or modify project information."},{"lang":"es","value":"Vulnerabilidad de almacenamiento de información sensible en texto claro en GX Works2 todas las versiones permite a un atacante divulgar información de credenciales almacenada en texto claro de los archivos de proyecto. Como resultado, el atacante podría abrir archivos de proyecto protegidos por autenticación de usuario utilizando la información de credenciales divulgada, y obtener o modificar información del proyecto."}],"id":"CVE-2025-3784","lastModified":"2026-10-18T20:10:00.110","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-3784","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-11-28T14:39:33.477482Z","version":"2.0.3"}}]},"published":"2025-11-27T05:16:15.467","references":[{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","url":"https://jvn.jp/vu/JVNVU95288056/"},{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-01"},{"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","url":"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-016_en.pdf"}],"sourceIdentifier":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-312"}],"source":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","type":"Secondary"}]}