CVE-2022-25160

mediumPriorität · verfolgen · 24OT-Risiko · erhöhtEPSS 0.012 · 67. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.16% (67th) EPSS

CVSS 4.3 · medium

Is it mine?

85 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R16/32/64MTCPU all versions, Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions, Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions, Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions, Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions and Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions allows a remote unauthenticated attacker to disclose a file in a legitimate user's product by using previously eavesdropped cleartext information and to counterfeit a legitimate user’s system.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

MitigationMELSEC L series L02/06/26CPU(-P) L26CPU-(P)BTcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC L series LJ71C24(-R2)cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC L series LJ71E71-100cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC L series LJ72GF15-T2cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series Q03/04/06/13/26UDVCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series Q03UDECPU Q04/06/10/13/20/26/50/100UDEHCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series Q04/06/13/26UDPVCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series QJ71C24N(-R2/R4)cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series QJ71E71-100cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series QJ72BR15cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series QJ72LP25(-25/G/GE)cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-F Series FX5U(C) CPU modules All modelscisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-F Series FX5UJ CPU modules All modelscisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series 04/08/16/32/120(EN)CPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series J71GN11-EIPcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series R00/01/02CPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series R08/16/32/120PCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series R08/16/32/120PSFCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series R08/16/32/120SFCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series R16/32/64MTCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ71C24(-R2/R4)cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ71EN71cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ71GF11-T2cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ71GN11-T2cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ71GP21(S)-SXcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ72GF15-T2cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 2.9

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 2.2 · Auswirkung 3.6

v3.06.8mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:Nsecondary · CISA US

v3.16.8mediumAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.15.4mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-312USprimärCWE-312USCWE-312US

betroffene Produkte (85)

Betroffene Produkte und Versionsbereiche.

MELSEC L series L02/06/26CPU(-P) L26CPU-(P)BT: All versionsalle Versionencisa_csaf_otUS
MELSEC L series LJ71C24(-R2): All versionsalle Versionencisa_csaf_otUS
MELSEC L series LJ71E71-100: All versionsalle Versionencisa_csaf_otUS
MELSEC L series LJ72GF15-T2: All versionsalle Versionencisa_csaf_otUS
MELSEC Q series Q03/04/06/13/26UDVCPU: All versionsalle Versionencisa_csaf_otUS
MELSEC Q series Q03UDECPU Q04/06/10/13/20/26/50/100UDEHCPU: All versionsalle Versionencisa_csaf_otUS
MELSEC Q series Q04/06/13/26UDPVCPU: All versionsalle Versionencisa_csaf_otUS
MELSEC Q series QJ71C24N(-R2/R4): All versionsalle Versionencisa_csaf_otUS
MELSEC Q series QJ71E71-100: All versionsalle Versionencisa_csaf_otUS
MELSEC Q series QJ72BR15: All versionsalle Versionencisa_csaf_otUS
MELSEC Q series QJ72LP25(-25/G/GE): All versionsalle Versionencisa_csaf_otUS
MELSEC iQ-F Series FX5U(C) CPU modules All models: All versionsalle Versionencisa_csaf_otUS
MELSEC iQ-F Series FX5UJ CPU modules All models: All versionsalle Versionencisa_csaf_otUS
MELSEC iQ-R series 04/08/16/32/120(EN)CPU: All versionsalle Versionencisa_csaf_otUS
MELSEC iQ-R series J71GN11-EIP: All versionsalle Versionencisa_csaf_otUS
MELSEC iQ-R series R00/01/02CPU: All versionsalle Versionencisa_csaf_otUS
MELSEC iQ-R series R08/16/32/120PCPU: All versionsalle Versionencisa_csaf_otUS
MELSEC iQ-R series R08/16/32/120PSFCPU: All versionsalle Versionencisa_csaf_otUS
MELSEC iQ-R series R08/16/32/120SFCPU: All versionsalle Versionencisa_csaf_otUS
MELSEC iQ-R series R16/32/64MTCPU: All versionsalle Versionencisa_csaf_otUS

20 von 85 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-22-090-04Mitsubishi Electric FA Products2022-03-31icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities may allow an attacker to log in to the affected products and/or alter and obtain sensitive information.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 2022-04-01geändert 2026-06-17

verwandt (1,243)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2023-22894US	medium4.9OT kritisch	4.11% (91st)	KEV	2023-04-19
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns t…
CVE-2020-29583US	critical9.8OT kritisch	90.2% (100th)	KEV	2020-12-22
Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the fi…
CVE-2011-4723US	medium6.8OT kritisch	3.06% (88th)	KEV	2011-12-20
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
CVE-2023-50719US	high7.5OT hoch	83.5% (100th)	—	2023-12-15
XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password…
CVE-2022-26148US	critical9.8OT hoch	52.5% (99th)	—	2022-03-21
An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and a…

+1238 weitere

Referenzen (12)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan