Cleartext Storage Vulnerability in Mitsubishi Electric Products
CVE-2025-14816
9.3CRITICAL
Key Information:
- Vendor
- CVE Published:
- 8 April 2026
What is CVE-2025-14816?
A vulnerability in Mitsubishi Electric products allows local attackers to view SQL Server credentials in plain text through the GUI of the Hyper Historian Splitter feature. When SQL authentication is used, this exposure enables unauthorized access to the SQL Server, putting sensitive data at risk of disclosure, tampering, or destruction, and potentially causing denial-of-service conditions.
Affected Version(s)
AnalytiX versions 10.97.3 and prior
AnalytiX versions 10.97.3 and prior
GENESIS versions 11.02 and prior