This vulnerability (CWE-303) in Mitsubishi Electric GX Works3 and Motion Control Setting arises from an incorrect implementation of the authentication algorithm. A local attacker with limited privileges can exploit this by executing the affected software and altering part of its executable module in memory, bypassing password checks. The attacker may then gain unauthorized access to control programs, potentially leading to their viewing, modification, or deletion. The CVSS 4.0 score is 9.2 (critical), reflecting high impact and exploitability under local attack conditions.

Successful exploitation allows a local attacker to bypass authentication controls despite invalid passwords, leading to unauthorized access to sensitive control programs. This can result in viewing, tampering, destruction, or deletion of these programs, which may disrupt industrial control processes or cause operational damage.

An official patch is available for this vulnerability. Users should apply the vendor-provided fix promptly to remediate the authentication bypass issue. Since this is a cloud service, the vendor manages remediation server-side; users should verify patch status with Mitsubishi Electric's advisory. No known exploits are reported in the wild at this time.