CVE-2022-25161

high-risk
Published 2022-05-18

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later and versions prior to 1.270, Mitsubishi Electric Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 179**** and prior and versions prior to 1.073, MELSEC iQ-F series FX5UC-xMy/z(x=32,64,96, y=T,R, z=D,DSS) with serial number 17X**** or later and versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UC-xMy/z(x=32,64,96, y=T,R, z=D,DSS) with serial number 179**** and prior and versions prior to 1.073, Mitsubishi Electric MELSEC iQ-F series FX5UC-32MT/DS-TS versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UC-32MT/DSS-TS versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UC-32MR/DS-TS versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UJ-xMy/z(x=24,40,60, y=T,R, z=ES,ESS) versions prior to 1.030, Mitsubishi Electric MELSEC iQ-F series FX5UJ-xMy/ES-A(x=24,40,60, y=T,R) versions prior to 1.031 and Mitsubishi Electric MELSEC iQ-F series FX5S-xMy/z(x=30,40,60,80, y=T,R, z=ES,ESS) version 1.000 allows a remote unauthenticated attacker to cause a DoS condition for the product's program execution or communication by sending specially crafted packets. System reset of the product is required for recovery.

Do I need to act?

-
0.32% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.6/10 High
NETWORK / LOW complexity

Affected Products (20)

Melsec Iq-Fx5U-32Mt\/Es Firmware
Melsec Iq-Fx5U-32Mt\/Ds Firmware
Melsec Iq-Fx5U-32Mt\/Ess Firmware
Melsec Iq-Fx5U-32Mt\/Dss Firmware
Melsec Iq-Fx5U-32Mr\/Es Firmware
Melsec Iq-Fx5U-32Mr\/Ds Firmware
Melsec Iq-Fx5U-32Mr\/Ess Firmware
Melsec Iq-Fx5U-32Mr\/Dss Firmware
Melsec Iq-Fx5U-64Mt\/Es Firmware
Melsec Iq-Fx5U-64Mt\/Ds Firmware
Melsec Iq-Fx5U-64Mt\/Ess Firmware
Melsec Iq-Fx5U-64Mt\/Dss Firmware
Melsec Iq-Fx5U-64Mr\/Es Firmware
Melsec Iq-Fx5U-64Mr\/Ds Firmware
Melsec Iq-Fx5U-64Mr\/Ess Firmware
Melsec Iq-Fx5U-64Mr\/Dss Firmware
Melsec Iq-Fx5U-80Mt\/Es Firmware
Melsec Iq-Fx5U-80Mt\/Ds Firmware
Melsec Iq-Fx5U-80Mt\/Ess Firmware
Melsec Iq-Fx5U-80Mt\/Dss Firmware
60
/ 100
high-risk
Severity 29/34 · Critical
Exploitability 1/34 · Minimal
Exposure 30/34 · Critical