EUVD Vulnerability Catalog
EUVD-2026-81400
Severity: CRITICAL
Base Score: 9.2
CVSS Version: 4.0
Vulnerability Description
Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in memory, and thereby may be able to view, tamper with, destroy, or delete control programs.
CVSS Vector Analysis
Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:H/SA:H
▪
Attack Vector (AV): Local
▪
Attack Complexity (AC): Low
▪
Attack Requirements (AT): None
▪
Privileges Required (PR): Low
▪
User Interaction (UI): None
▪
Vulnerability Confidentiality Impact (VC): High
▪
Vulnerability Integrity Impact (VI): High
▪
Vulnerability Availability Impact (VA): None
▪
Subsequent Confidentiality Impact (SC): None
▪
Subsequent Integrity Impact (SI): High
▪
Subsequent Availability Impact (SA): High
Affected Vendors & Systems
Vendor
Mitsubishi Electric Corporation
References & Advisory Links
Metadata Profile
Database Authority
European Union Agency for Cybersecurity (ENISA) EUVD
Assigner
Mitsubishi
EPSS Probability
0
Known Aliases
CVE-2026-15688
GHSA-x4hf-m6gp-2m3x
Published On
2026-09-17
Last Updated
2026-09-17