CVEvulnerability

CVE-2022-24946

7.5 HIGH Published 2022-06-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-06-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-413, CWE-667

Description

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.

Affected configurations

• mitsubishielectric q03udecpu firmware • mitsubishielectric q04udehcpu firmware • mitsubishielectric q04udpvcpu firmware • mitsubishielectric q04udvcpu firmware • mitsubishielectric q100udehcpu firmware • mitsubishielectric q50udehcpu firmware • mitsubishielectric q26dhccpu-ls firmware • mitsubishielectric q26udehcpu firmware • mitsubishielectric q26udpvcpu firmware • mitsubishielectric q26udvcpu firmware • mitsubishielectric q20udehcpu firmware • mitsubishielectric q13udehcpu firmware • mitsubishielectric q13udpvcpu firmware • mitsubishielectric q13udvcpu firmware • mitsubishielectric q10udehcpu firmware • mitsubishielectric q06ccpu-v firmware • mitsubishielectric q06phcpu firmware • mitsubishielectric q06udehcpu firmware • mitsubishielectric q06udpvcpu firmware • mitsubishielectric q06udvcpu firmware • mitsubishielectric l02cpu firmware • mitsubishielectric l02cpu-p firmware • mitsubishielectric l02scpu firmware • mitsubishielectric l02scpu-p firmware • mitsubishielectric l06cpu firmware • mitsubishielectric l06cpu-p firmware • mitsubishielectric l26cpu firmware • mitsubishielectric l26cpu-\(p\)bt firmware • mitsubishielectric l26cpu-bt firmware • mitsubishielectric l26cpu-bt-cm firmware • mitsubishielectric l26cpu-p firmware • mitsubishielectric l26cpu-pbt firmware

Related

Weakness · CWE (2)

  • CWE-413 Improper Resource Locking weakness
  • CWE-667 Improper Locking weakness

References