MEDIUM🇬🇧 English

CVE-2022-40267

CVSS 5.9v3.1pub. 2023-01-20upd. 2024-11-21

Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/z (x=24,40,60, y=T,R, z=ES,ESS) versions 1.042 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/ES-A (x=24,40,60, y=T,R) versions 1.043 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-xMy/z (x=30,40,60,80, y=T,R, z=ES,ESS) versions 1.003 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU versions 33 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU versions 66 and prior allows a remote unauthenticated attacker to access the Web server function by guessing the random numbers used for authentication from several used random numbers.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Mitsubishielectric Fx5s 30mr\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5s 30mr\/es Firmware

    OS
    Mitsubishielectric
    < 1.003

  • Mitsubishielectric Fx5s 30mt\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5s 30mt\/es Firmware

    OS
    Mitsubishielectric
    < 1.003

  • Mitsubishielectric Fx5s 30mt\/ess

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5s 30mt\/ess Firmware

    OS
    Mitsubishielectric
    < 1.003

  • Mitsubishielectric Fx5s 40mr\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5s 40mr\/es Firmware

    OS
    Mitsubishielectric
    < 1.003

  • Mitsubishielectric Fx5s 40mt\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5s 40mt\/es Firmware

    OS
    Mitsubishielectric
    < 1.003

  • Mitsubishielectric Fx5s 60mr\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5s 60mr\/es Firmware

    OS
    Mitsubishielectric
    < 1.003

  • Mitsubishielectric Fx5s 60mt\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5s 60mt\/es Firmware

    OS
    Mitsubishielectric
    < 1.003

  • Mitsubishielectric Fx5s 80mr\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5s 80mr\/es Firmware

    OS
    Mitsubishielectric
    < 1.003

  • Mitsubishielectric Fx5s 80mt\/es

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5s 80mt\/es Firmware

    OS
    Mitsubishielectric
    < 1.003

  • Mitsubishielectric Fx5u 32mt\/dss

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5u 32mt\/dss Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5u 64mt\/dss

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5u 64mt\/dss Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5u 80mt\/dss

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5u 80mt\/dss Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5u 80mt\/ess

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5u 80mt\/ess Firmware

    OS
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mr\/ds Ts

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mr\/ds Ts Firmware

    OS
    Mitsubishielectric
    < 1.280

  • Mitsubishielectric Fx5uc 32mt\/d

    HW
    Mitsubishielectric
    wszystkie wersje

  • Mitsubishielectric Fx5uc 32mt\/d Firmware

    OS
    Mitsubishielectric
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2022-25158CRITICAL9.1ten sam produkt

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU...

CVE-2022-25157CRITICAL9.1ten sam produkt

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F s...

CVE-2020-16226CRITICAL9.8ten sam produkt

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious a...

CVE-2023-0457HIGH7.5ten sam produkt

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ...

CVE-2022-40265HIGH8.6ten sam produkt

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmwar...

CVE-2022-40267 — MEDIUM 5.9 | CVEbaza.pl