CRITICAL🇬🇧 English

CVE-2022-25157

CVSS 9.1v3.1pub. 2022-04-01upd. 2024-11-21

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R16/32/64MTCPU all versions, Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions, Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions, Mitsubishi Electric MELSEC iQ-R series RJ71GF11-T2 all versions, Mitsubishi Electric MELSEC iQ-R series RJ71GP21(S)-SX all versions, Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions, Mitsubishi Electric MELSEC Q series Q03UDECPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/10/13/20/26/50/100UDEHCPU all versions, Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions, Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions, Mitsubishi Electric MELSEC L series L02/06/26CPU(-P) all versions, Mitsubishi Electric MELSEC L series L26CPU-(P)BT all versions, Mitsubishi Electric MELSEC L series LJ71C24(-R2) all versions, Mitsubishi Electric MELSEC L series LJ71E71-100 all versions and Mitsubishi Electric MELSEC L series LJ72GF15-T2 all versions allows a remote unauthenticated attacker to disclose or tamper with the information in the product by using an eavesdropped password hash.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Mitsubishielectric Fx5uc

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mr\/ds Ts

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mr\/ds Ts Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mt\/d

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mt\/d Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mt\/dss

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mt\/dss Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mt\/dss Ts

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mt\/dss Ts Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mt\/ds Ts

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mt\/ds Ts Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 24mr\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 24mr\/es Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 24mt\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 24mt\/es Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 24mt\/ess

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 24mt\/ess Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 40mr\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 40mr\/es Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 40mt\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 40mt\/es Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 40mt\/ess

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 40mt\/ess Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 60mr\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 60mr\/es Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 60mt\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 60mt\/es Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uj 60mt\/ess

    HW
    Mitsubishielectric
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2022-25158CRITICAL9.1ten sam produkt

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU...

CVE-2020-16226CRITICAL9.8ten sam produkt

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious a...

CVE-2023-0457HIGH7.5ten sam produkt

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ...

CVE-2022-25159HIGH8.1ten sam produkt

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU al...

CVE-2022-25155HIGH8.1ten sam produkt

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F s...