Vulnerability · Published Dec 17, 2025 · Assigned by Mitsubishi

CVE-2025-11009Information Disclosure Vulnerability in GT Designer3

Medium 5.1

In plain English

A medium-severity security flaw in GT Designer3 Version1 (GOT1000) from Mitsubishi Electric Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).

Severity (CVSS 3.1)5.1Medium

Exploit odds (30 days)<0.1%top 99.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all versions and Mitsubishi Electric GT Designer3 Version1 (GOT1000) all versions allows a local unauthenticated attacker to obtain plaintext credentials from the project file for GT Designer3. This could allow the attacker to operate illegally GOT2000 series or GOT1000 series by using the obtained credentials.

Affected products (as reported)

Vendor	Product	Versions
Mitsubishi Electric Corporation	GT Designer3 Version1 (GOT2000)	all versions
Mitsubishi Electric Corporation	GT Designer3 Version1 (GOT1000)	all versions

Weakness: CWE-312 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-017_en.pdf vendor-advisory
https://jvn.jp/vu/JVNVU99629801/ government-resource