GX Works3 (All Versions) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/gx-works3-all-versions/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 17 Sep 2026 17:11:14 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAuthentication Bypass Vulnerability in Mitsubishi Electric GX Works3https://feed.craftedsignal.io/briefs/2026-09-mitsubishi-authentication-bypass/Thu, 17 Sep 2026 17:11:14 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-mitsubishi-authentication-bypass/An incorrect implementation of the authentication algorithm (CVE-2026-15688) in Mitsubishi Electric GX Works3 and Motion Control Settings allows local attackers to bypass block password protections and manipulate control programs.Mitsubishi Electric GX Works3 and the bundled Motion Control Settings software are affected by an authentication algorithm flaw (CVE-2026-15688), classified as CWE-303. This vulnerability stems from an incorrect implementation that allows a local user to bypass security controls. By executing the application and performing memory manipulation to alter parts of the loaded executable module, an attacker can circumvent password validation mechanisms. Successful exploitation grants the attacker the ability to view, tamper with, destroy, or delete critical control programs used in industrial manufacturing environments. Given the potential impact on control logic, the vulnerability is highly critical in operational technology (OT) settings where integrity of control programs is essential for safety and uptime.

Impact

The vulnerability affects users of Mitsubishi Electric GX Works3 and Motion Control Settings worldwide, particularly within the critical manufacturing sector. Successful exploitation leads to total loss of integrity and availability of control programs, potentially resulting in unauthorized process modification or operational disruption. The vulnerability is assigned a CVSS v3.1 score of 8.8 (High) and a CVSS v4.0 score of 9.2 (Critical).

Recommendation

  • Update Mitsubishi Electric GX Works3 to version 1.096A or later to address CVE-2026-15688.
  • Update Motion Control Settings to version 1.070Y or later.
  • Following the update, configure the security version for projects to "2" as detailed in the Mitsubishi Electric security manual.
  • Restrict local physical access to workstations running the affected software and implement rigorous access controls for all users who interact with these machines.
  • Deploy endpoint security solutions to monitor for suspicious process injection or memory modification attempts on engineering workstations.
  • Isolate control system networks from untrusted networks and the internet, ensuring remote access is restricted to authenticated, VPN-secured connections.
]]>highadvisoryindustrial-control-systemscveauthentication-bypass