What is CVE-2025-11009?

CVE-2025-11009 is a medium-severity vulnerability in Mitsubishi Electric Corporation Gt Designer3 Version1 (Got1000), classified under Cleartext Storage of Sensitive Information. CVSS score: 5.1/10. Published 2025-12-17.

How severe is CVE-2025-11009?

Medium severity. CVSS v3 base score is 5.1 out of 10.

Vulnerability in Mitsubishi Electric Corporation Gt Designer3 Version1 (Got1000)

CVE-2025-11009

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all versions and Mitsubishi Electric GT Designer3 Version1 (GOT1000) all versions allows a local unauthenticated attacker to obtain plaintext credentials from the project file for GT Designer3. This could allow the attacker to operate illegally GOT2000 series or GOT1000 series by using the obtained credentials.

EPSS: 0.001 (0.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.1 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Mitsubishi Electric Corporation Gt Designer3 Version1 (Got1000) — versions all versions
Mitsubishi Electric Corporation Gt Designer3 Version1 (Got2000) — versions all versions

Weakness classification (CWE)

CWE-312 — Cleartext Storage of Sensitive Information

References

Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp (vendor-advisory)
Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp (government-resource)

Frequently asked questions

What is CVE-2025-11009?: CVE-2025-11009 is a medium-severity vulnerability in Mitsubishi Electric Corporation Gt Designer3 Version1 (Got1000), classified under Cleartext Storage of Sensitive Information. CVSS score: 5.1/10. Published 2025-12-17.
How severe is CVE-2025-11009?: Medium severity. CVSS v3 base score is 5.1 out of 10.