CVE-2022-24946

highpriority · track · 31EPSS 0.017 · 77 %ileEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.69% (77th) EPSS
CVSS 7.8 · high
Is it mine?
99 products
Check your exposure
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · scored 2026-10-27

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedMELSEC L Series L02CPU(-P)cisa_csaf_ot

    MELSEC L Series L02CPU(-P): Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC L Series L06CPU(-P)cisa_csaf_ot

    MELSEC L Series L06CPU(-P): Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC L Series L26CPU(-P)cisa_csaf_ot

    MELSEC L Series L26CPU(-P): Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC L Series L26CPU-(P)BTcisa_csaf_ot

    MELSEC L Series L26CPU-(P)BT: Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC Q Series Q03UDECPUcisa_csaf_ot

    MELSEC Q Series Q03UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • FixedMELSEC Q Series Q03UDVCPUcisa_csaf_ot

    MELSEC Q Series Q03UDVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC Q Series Q04UDECPUcisa_csaf_ot

    MELSEC Q Series Q04UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • FixedMELSEC Q Series Q04UDPVCPUcisa_csaf_ot

    MELSEC Q Series Q04UDPVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC Q Series Q04UDVCPUcisa_csaf_ot

    MELSEC Q Series Q04UDVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC Q Series Q06UDECPUcisa_csaf_ot

    MELSEC Q Series Q06UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • FixedMELSEC Q Series Q06UDPVCPUcisa_csaf_ot

    MELSEC Q Series Q06UDPVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC Q Series Q06UDVCPUcisa_csaf_ot

    MELSEC Q Series Q06UDVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC Q Series Q100UDECPUcisa_csaf_ot

    MELSEC Q Series Q100UDECPU: Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC Q Series Q10UDECPUcisa_csaf_ot

    MELSEC Q Series Q10UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • FixedMELSEC Q Series Q12DCCPU-Vcisa_csaf_ot

    MELSEC Q Series Q12DCCPU-V: Versions with the first 5 digits of serial No. 25062 and later

  • FixedMELSEC Q Series Q13UDECPUcisa_csaf_ot

    MELSEC Q Series Q13UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • FixedMELSEC Q Series Q13UDPVCPUcisa_csaf_ot

    MELSEC Q Series Q13UDPVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC Q Series Q13UDVCPUcisa_csaf_ot

    MELSEC Q Series Q13UDVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC Q Series Q20UDECPUcisa_csaf_ot

    MELSEC Q Series Q20UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • FixedMELSEC Q Series Q24DHCCPU-LScisa_csaf_ot

    MELSEC Q Series Q24DHCCPU-LS: Versions with the first 5 digits of serial No. 25062 and later

  • FixedMELSEC Q Series Q24DHCCPU-V(G)cisa_csaf_ot

    MELSEC Q Series Q24DHCCPU-V(G): Versions with the first 5 digits of serial No. 25062 and later

  • FixedMELSEC Q Series Q26DHCCPU-LScisa_csaf_ot

    MELSEC Q Series Q26DHCCPU-LS: Versions with the first 5 digits of serial No. 25062 and later

  • FixedMELSEC Q Series Q26UDECPUcisa_csaf_ot

    MELSEC Q Series Q26UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • FixedMELSEC Q Series Q26UDPVCPUcisa_csaf_ot

    MELSEC Q Series Q26UDPVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC Q Series Q26UDVCPUcisa_csaf_ot

    MELSEC Q Series Q26UDVCPU: Versions with the first 5 digits of serial No. 24052 and later

  • FixedMELSEC Q Series Q50UDECPUcisa_csaf_ot

    MELSEC Q Series Q50UDECPU: Versions with the first 5 digits of serial No. 24062 and later

  • MitigationMELIPC Series MI5122-VW CPU Firmwarecisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC L Series L02CPU(-P)cisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC L Series L06CPU(-P)cisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC L Series L26CPU(-P)cisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC L Series L26CPU-(P)BTcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q03UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q03UDVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q04UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q04UDPVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q04UDVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q06UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q06UDPVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q06UDVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q100UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q10UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q12DCCPU-Vcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q13UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q13UDPVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q13UDVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q20UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q24DHCCPU-LScisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q24DHCCPU-V(G)cisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q26DHCCPU-LScisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q26UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q26UDPVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q26UDVCPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC Q Series Q50UDECPUcisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

  • MitigationMELSEC iQ-R Series R12CCPU-V CPU Firmwarecisa_csaf_ot

    Customers using the MELIPC Series will be unable to update to the fixed version. Take the mitigation measures that are common to all affected products found later in the advisory.

02

cvss

Technical severity, 0–10. One row per scoring source.

7.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.8

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USexploitability 10 · impact 6.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6
v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondaryexploitability 3.9 · impact 3.6
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-667USprimaryCWE-413USCWE-413US
05

affected products (99)

Products and version ranges known to be affected.

showing 20 of 99
06

advisories (1)

Vendor and ecosystem advisories describing this.

  • ICSA-22-172-01Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update C)2022-06-14icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could result in a denial-of-service condition for Ethernet communication. A system restart would be required to restore functionality.

07

also known as (3)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otNVDCVE.orgMITRE
published 2022-06-15modified 2026-06-17
10

references (12)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan