CVE-2022-25163
Critical
Description
Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial number "24061" or prior, Mitsubishi Electric MELSEC-L series LJ71E71-100 first 5 digits of serial number "24061" or prior and Mitsubishi Electric MELSEC iQ-R Series RD81MES96N firmware version "08" or prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on the target products by sending specially crafted packets.
SeverityCritical
CVSS9.8
Exploit probability—
ProductMitsubishi Melsec Iq-r Rd81mes96n Firmware
PublishedJun 2, 2022
First seenJun 2, 2022
How to fix
Update
- mitsubishi melsec_iq-r_rd81mes96n_firmware09 or later
- mitsubishi melsec_qj71e71-100_firmware24062 or later
- mitsubishi melsec_lj71e71-100_firmware24062 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishi melsec_iq-r_rd81mes96n_firmware | v < 09 | 09 |
| mitsubishi melsec_qj71e71-100_firmware | v < 24062 | 24062 |
| mitsubishi melsec_lj71e71-100_firmware | v < 24062 | 24062 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.