← Back to CVE List
CVE-2026-15688NVD
Vulnerability Summary
Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in memory, and thereby may be able to view, tamper with, destroy, or delete control programs.
CVSS v4.0 Base Metrics — Score 9.2 (CRITICAL)
Attack VectorLocal
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredLow
User InteractionNone
Confidentiality (Vulnerable System)High
Integrity (Vulnerable System)High
Availability (Vulnerable System)None
Confidentiality (Subsequent System)None
Integrity (Subsequent System)High
Availability (Subsequent System)High
Affected & Patched Versions
- Mitsubishi Electric Corporation GX Works3 >= All versions
- Mitsubishi Electric Corporation Motion Control Setting >= All versions
Not provided by cveorg for this CVE.