Medium severity · published Dec 17, 2025
CVE-2025-11009
Information Disclosure Vulnerability in GT Designer3
5.1
CVSS
0.1%
EPSS
No
On KEV
Description
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all versions and Mitsubishi Electric GT Designer3 Version1 (GOT1000) all versions allows a local unauthenticated attacker to obtain plaintext credentials from the project file for GT Designer3. This could allow the attacker to operate illegally GOT2000 series or GOT1000 series by using the obtained credentials.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
GT Designer3 Version1 (GOT1000) · Mitsubishi Electric Corporation
all versions · source: vendor
GD
GT Designer3 Version1 (GOT2000) · Mitsubishi Electric Corporation
all versions · source: vendor
Affected product
GD
GT Designer3 Version1 (GOT1000)
Mitsubishi Electric Corporation