CVE-2022-25161

High

Description

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later and versions prior to 1.270, Mitsubishi Electric Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 179**** and prior and versions prior to 1.073, MELSEC iQ-F series FX5UC-xMy/z(x=32,64,96, y=T,R, z=D,DSS) with serial number 17X**** or later and versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UC-xMy/z(x=32,64,96, y=T,R, z=D,DSS) with serial number 179**** and prior and versions prior to 1.073, Mitsubishi Electric MELSEC iQ-F series FX5UC-32MT/DS-TS versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UC-32MT/DSS-TS versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UC-32MR/DS-TS versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UJ-xMy/z(x=24,40,60, y=T,R, z=ES,ESS) versions prior to 1.030, Mitsubishi Electric MELSEC iQ-F series FX5UJ-xMy/ES-A(x=24,40,60, y=T,R) versions prior to 1.031 and Mitsubishi Electric MELSEC iQ-F series FX5S-xMy/z(x=30,40,60,80, y=T,R, z=ES,ESS) version 1.000 allows a remote unauthenticated attacker to cause a DoS condition for the product's program execution or communication by sending specially crafted packets. System reset of the product is required for recovery.

SeverityHigh
CVSS8.6
Exploit probability—
ProductMitsubishielectric Melsec Iq-fx5u-32mt\/es Firmware
PublishedMay 18, 2022
First seenMay 18, 2022

How to fix

Update
  • mitsubishielectric melsec_iq-fx5u-32mt\/es_firmware1.270 or later
  • mitsubishielectric melsec_iq-fx5u-32mt\/ds_firmware1.270 or later
  • mitsubishielectric melsec_iq-fx5u-32mt\/ess_firmware1.270 or later
  • mitsubishielectric melsec_iq-fx5u-32mt\/dss_firmware1.270 or later
  • mitsubishielectric melsec_iq-fx5u-32mr\/es_firmware1.270 or later
  • mitsubishielectric melsec_iq-fx5u-32mr\/ds_firmware1.270 or later
  • mitsubishielectric melsec_iq-fx5u-32mr\/ess_firmware1.270 or later
  • mitsubishielectric melsec_iq-fx5u-32mr\/dss_firmware1.270 or later
  • mitsubishielectric melsec_iq-fx5u-64mt\/es_firmware1.270 or later
  • mitsubishielectric melsec_iq-fx5u-64mt\/ds_firmware1.270 or later
  • mitsubishielectric melsec_iq-fx5u-64mt\/ess_firmware1.270 or later
  • mitsubishielectric melsec_iq-fx5u-64mt\/dss_firmware1.270 or later

Affected products

ProductAffected versionsFixed in
mitsubishielectric melsec_iq-fx5u-32mt\/es_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-32mt\/ds_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-32mt\/ess_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-32mt\/dss_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-32mr\/es_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-32mr\/ds_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-32mr\/ess_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-32mr\/dss_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-64mt\/es_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-64mt\/ds_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-64mt\/ess_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-64mt\/dss_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-64mr\/es_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-64mr\/ds_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-64mr\/ess_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-64mr\/dss_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-80mt\/es_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-80mt\/ds_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-80mt\/ess_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-80mt\/dss_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-80mr\/es_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-80mr\/ds_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-80mr\/ess_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5u-80mr\/dss_firmwarev < 1.2701.270
mitsubhishielectric melsec_iq-fx5u-32mt\/es_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-32mt\/ds_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-32mt\/ess_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-32mt\/dss_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-32mr\/es_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-32mr\/ds_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-32mr\/ess_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-32mr\/dss_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-64mt\/es_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-64mt\/ds_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-64mt\/ess_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-64mt\/dss_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-64mr\/es_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-64mr\/ds_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-64mr\/ess_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-64mr\/dss_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-80mt\/es_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-80mt\/ds_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-80mt\/ess_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-80mt\/dss_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-80mr\/es_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-80mr\/ds_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-80mr\/ess_firmwarev < 1.0731.073
mitsubhishielectric melsec_iq-fx5u-80mr\/dss_firmwarev < 1.0731.073
mitsubishielectric melsec_iq-fx5uc-32mt\/dds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-32mt\/ds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-32mr\/dds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-32mr\/ds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-64mt\/dds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-64mt\/ds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-64mr\/dds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-64mr\/ds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-96mt\/dds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-96mt\/ds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-96mr\/dds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-96mr\/ds_firmwarev < 1.270, v < 1.0731.270, 1.073
mitsubishielectric melsec_iq-fx5uc-32mt\/ds-ts_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5uc-32mt\/dss-ts_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5uc-32mr\/ds-ts_firmwarev < 1.2701.270
mitsubishielectric melsec_iq-fx5uj-24mt\/es_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-24mt\/ess_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-24mr\/es_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-24mr\/ess_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-40mt\/es_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-40mt\/ess_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-40mr\/es_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-40mr\/ess_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-60mt\/es_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-60mt\/ess_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-60mr\/es_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-60mr\/ess_firmwarev < 1.0301.030
mitsubishielectric melsec_iq-fx5uj-24mt\/es-a_firmwarev < 1.0311.031
mitsubishielectric melsec_iq-fx5uj-24mr\/es-a_firmwarev < 1.0311.031
mitsubishielectric melsec_iq-fx5uj-40mt\/es-a_firmwarev < 1.0311.031
mitsubishielectric melsec_iq-fx5uj-40mr\/es-a_firmwarev < 1.0311.031
mitsubishielectric melsec_iq-fx5uj-60mt\/es-a_firmwarev < 1.0311.031
mitsubishielectric melsec_iq-fx5uj-60mr\/es-a_firmwarev < 1.0311.031
mitsubishielectric melsec_iq-fx5s-30mt\/es_firmware1.000—
mitsubishielectric melsec_iq-fx5s-30mt\/ess_firmware1.000—
mitsubishielectric melsec_iq-fx5s-30mr\/es_firmware1.000—
mitsubishielectric melsec_iq-fx5s-30mr\/ess_firmware1.000—
mitsubishielectric melsec_iq-fx5s-40mt\/es_firmware1.000—
mitsubishielectric melsec_iq-fx5s-40mt\/ess_firmware1.000—
mitsubishielectric melsec_iq-fx5s-40mr\/es_firmware1.000—
mitsubishielectric melsec_iq-fx5s-40mr\/ess_firmware1.000—
mitsubishielectric melsec_iq-fx5s-60mt\/es_firmware1.000—
mitsubishielectric melsec_iq-fx5s-60mt\/ess_firmware1.000—
mitsubishielectric melsec_iq-fx5s-60mr\/es_firmware1.000—
mitsubishielectric melsec_iq-fx5s-60mr\/ess_firmware1.000—
mitsubishielectric melsec_iq-fx5s-80mt\/es_firmware1.000—
mitsubishielectric melsec_iq-fx5s-80mt\/ess_firmware1.000—
mitsubishielectric melsec_iq-fx5s-80mr\/es_firmware1.000—
mitsubishielectric melsec_iq-fx5s-80mr\/ess_firmware1.000—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.