HIGH🇵🇱 Wersja polska

CVE-2022-24946

CVSS 7.5v3.1pub. 2022-06-15upd. 2026-06-02

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Mitsubishielectric L02cpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L02cpu Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric L02cpu P

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L02cpu P Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric L02scpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L02scpu Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric L02scpu P

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L02scpu P Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric L06cpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L06cpu Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric L06cpu P

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L06cpu P Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu Bt

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu Bt Cm

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu Bt Cm Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu Bt Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu P

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu Pbt

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu \(p\)bt

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu Pbt Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu \(p\)bt Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric L26cpu P Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Q03udecpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Q03udecpu Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Q04udehcpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Q04udehcpu Firmware

    OS
    Mitsubishielectric
    all versions

  • Mitsubishielectric Q04udpvcpu

    HW
    Mitsubishielectric
    all versions

  • Mitsubishielectric Q04udpvcpu Firmware

    OS
    Mitsubishielectric
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth BypassDoS
CWE
References

Related vulnerabilities

CVE-2020-16226CRITICAL9.8PL ✓same product

Podatność na podszywanie się pod urządzenie w produktach Mitsubishi Electric — RCE

CVE-2020-5527HIGH7.5same product

When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F ...

CVE-2019-6535HIGH7.5same product

Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 2...

CVE-2019-13555MEDIUM5.9same product

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVC...

CVE-2023-6943CRITICAL9.8PL ✓same vendor

Unsafe Reflection w oprogramowaniu Mitsubishi Electric — zdalne wykonanie kodu