CVE-2022-24946

highPriorität · verfolgen · 31EPSS 0.017 · 77. PerzentilEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.69% (77th) EPSS
CVSS 7.8 · high
Is it mine?
99 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenMELSEC L Series L02CPU(-P)cisa_csaf_ot

    MELSEC L Series L02CPU(-P): Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC L Series L06CPU(-P)cisa_csaf_ot

    MELSEC L Series L06CPU(-P): Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC L Series L26CPU(-P)cisa_csaf_ot

    MELSEC L Series L26CPU(-P): Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC L Series L26CPU-(P)BTcisa_csaf_ot

    MELSEC L Series L26CPU-(P)BT: Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC Q Series Q03UDECPUcisa_csaf_ot

    MELSEC Q Series Q03UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • BehobenMELSEC Q Series Q03UDVCPUcisa_csaf_ot

    MELSEC Q Series Q03UDVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC Q Series Q04UDECPUcisa_csaf_ot

    MELSEC Q Series Q04UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • BehobenMELSEC Q Series Q04UDPVCPUcisa_csaf_ot

    MELSEC Q Series Q04UDPVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC Q Series Q04UDVCPUcisa_csaf_ot

    MELSEC Q Series Q04UDVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC Q Series Q06UDECPUcisa_csaf_ot

    MELSEC Q Series Q06UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • BehobenMELSEC Q Series Q06UDPVCPUcisa_csaf_ot

    MELSEC Q Series Q06UDPVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC Q Series Q06UDVCPUcisa_csaf_ot

    MELSEC Q Series Q06UDVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC Q Series Q100UDECPUcisa_csaf_ot

    MELSEC Q Series Q100UDECPU: Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC Q Series Q10UDECPUcisa_csaf_ot

    MELSEC Q Series Q10UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • BehobenMELSEC Q Series Q12DCCPU-Vcisa_csaf_ot

    MELSEC Q Series Q12DCCPU-V: Versions with the first 5 digits of serial No. 25062 and later

  • BehobenMELSEC Q Series Q13UDECPUcisa_csaf_ot

    MELSEC Q Series Q13UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • BehobenMELSEC Q Series Q13UDPVCPUcisa_csaf_ot

    MELSEC Q Series Q13UDPVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC Q Series Q13UDVCPUcisa_csaf_ot

    MELSEC Q Series Q13UDVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC Q Series Q20UDECPUcisa_csaf_ot

    MELSEC Q Series Q20UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • BehobenMELSEC Q Series Q24DHCCPU-LScisa_csaf_ot

    MELSEC Q Series Q24DHCCPU-LS: Versions with the first 5 digits of serial No. 25062 and later

  • BehobenMELSEC Q Series Q24DHCCPU-V(G)cisa_csaf_ot

    MELSEC Q Series Q24DHCCPU-V(G): Versions with the first 5 digits of serial No. 25062 and later

  • BehobenMELSEC Q Series Q26DHCCPU-LScisa_csaf_ot

    MELSEC Q Series Q26DHCCPU-LS: Versions with the first 5 digits of serial No. 25062 and later

  • BehobenMELSEC Q Series Q26UDECPUcisa_csaf_ot

    MELSEC Q Series Q26UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • BehobenMELSEC Q Series Q26UDPVCPUcisa_csaf_ot

    MELSEC Q Series Q26UDPVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC Q Series Q26UDVCPUcisa_csaf_ot

    MELSEC Q Series Q26UDVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • BehobenMELSEC Q Series Q50UDECPUcisa_csaf_ot

    MELSEC Q Series Q50UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • MitigationMELIPC Series MI5122-VW CPU Firmwarecisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC L Series L02CPU(-P)cisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC L Series L06CPU(-P)cisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC L Series L26CPU(-P)cisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC L Series L26CPU-(P)BTcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q03UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q03UDVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q04UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q04UDPVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q04UDVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q06UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q06UDPVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q06UDVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q100UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q10UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q12DCCPU-Vcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q13UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q13UDPVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q13UDVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q20UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q24DHCCPU-LScisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q24DHCCPU-V(G)cisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q26DHCCPU-LScisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q26UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q26UDPVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q26UDVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q50UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC iQ-R Series R12CCPU-V CPU Firmwarecisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–7.8

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HsecondaryAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-667USprimärCWE-413USCWE-413US
05

betroffene Produkte (99)

Betroffene Produkte und Versionsbereiche.

20 von 99 angezeigt
06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-22-172-01Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update C)2022-06-14icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could result in a denial-of-service condition for Ethernet communication. A system restart would be required to restore functionality.

07

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2022-06-15geändert 2026-06-17
10

Referenzen (12)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan