CVE-2022-25157

mediumpriority · track · 37EPSS 0.024 · 84 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

2.38% (84th) EPSS

CVSS 6.4 · medium

Is it mine?

94 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R16/32/64MTCPU all versions, Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions, Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions, Mitsubishi Electric MELSEC iQ-R series RJ71GF11-T2 all versions, Mitsubishi Electric MELSEC iQ-R series RJ71GP21(S)-SX all versions, Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions, Mitsubishi Electric MELSEC Q series Q03UDECPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/10/13/20/26/50/100UDEHCPU all versions, Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions, Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions, Mitsubishi Electric MELSEC L series L02/06/26CPU(-P) all versions, Mitsubishi Electric MELSEC L series L26CPU-(P)BT all versions, Mitsubishi Electric MELSEC L series LJ71C24(-R2) all versions, Mitsubishi Electric MELSEC L series LJ71E71-100 all versions and Mitsubishi Electric MELSEC L series LJ72GF15-T2 all versions allows a remote unauthenticated attacker to disclose or tamper with the information in the product by using an eavesdropped password hash.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No vendor fix yet; a mitigation is available.

MitigationMELSEC L series L02/06/26CPU(-P) L26CPU-(P)BTcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC L series LJ71C24(-R2)cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC L series LJ71E71-100cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC L series LJ72GF15-T2cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series Q03/04/06/13/26UDVCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series Q03UDECPU Q04/06/10/13/20/26/50/100UDEHCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series Q04/06/13/26UDPVCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series QJ71C24N(-R2/R4)cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series QJ71E71-100cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series QJ72BR15cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC Q series QJ72LP25(-25/G/GE)cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-F Series FX5U(C) CPU modules All modelscisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-F Series FX5UJ CPU modules All modelscisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series 04/08/16/32/120(EN)CPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series J71GN11-EIPcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series R00/01/02CPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series R08/16/32/120PCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series R08/16/32/120PSFCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series R08/16/32/120SFCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series R16/32/64MTCPUcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ71C24(-R2/R4)cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ71EN71cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ71GF11-T2cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ71GN11-T2cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ71GP21(S)-SXcisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
MitigationMELSEC iQ-R series RJ72GF15-T2cisa_csaf_ot
"14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)

cvss

Technical severity, 0–10. One row per scoring source.

9.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.4–9.1

v2.06.4mediumAV:N/AC:L/Au:N/C:P/I:P/A:Nprimary · NVD / NIST USexploitability 10 · impact 4.9

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 5.2

v3.07.4highCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · CISA US

v3.16.8mediumAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Nsecondary · FSTEC (BDU) RU

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-287USprimaryCWE-836USCWE-836US

affected products (94)

Products and version ranges known to be affected.

MELSEC L series L02/06/26CPU(-P) L26CPU-(P)BT: All versionsall versionscisa_csaf_otUS
MELSEC L series LJ71C24(-R2): All versionsall versionscisa_csaf_otUS
MELSEC L series LJ71E71-100: All versionsall versionscisa_csaf_otUS
MELSEC L series LJ72GF15-T2: All versionsall versionscisa_csaf_otUS
MELSEC Q series Q03/04/06/13/26UDVCPU: All versionsall versionscisa_csaf_otUS
MELSEC Q series Q03UDECPU Q04/06/10/13/20/26/50/100UDEHCPU: All versionsall versionscisa_csaf_otUS
MELSEC Q series Q04/06/13/26UDPVCPU: All versionsall versionscisa_csaf_otUS
MELSEC Q series QJ71C24N(-R2/R4): All versionsall versionscisa_csaf_otUS
MELSEC Q series QJ71E71-100: All versionsall versionscisa_csaf_otUS
MELSEC Q series QJ72BR15: All versionsall versionscisa_csaf_otUS
MELSEC Q series QJ72LP25(-25/G/GE): All versionsall versionscisa_csaf_otUS
MELSEC iQ-F Series FX5U(C) CPU modules All models: All versionsall versionscisa_csaf_otUS
MELSEC iQ-F Series FX5UJ CPU modules All models: All versionsall versionscisa_csaf_otUS
MELSEC iQ-R series 04/08/16/32/120(EN)CPU: All versionsall versionscisa_csaf_otUS
MELSEC iQ-R series J71GN11-EIP: All versionsall versionscisa_csaf_otUS
MELSEC iQ-R series R00/01/02CPU: All versionsall versionscisa_csaf_otUS
MELSEC iQ-R series R08/16/32/120PCPU: All versionsall versionscisa_csaf_otUS
MELSEC iQ-R series R08/16/32/120PSFCPU: All versionsall versionscisa_csaf_otUS
MELSEC iQ-R series R08/16/32/120SFCPU: All versionsall versionscisa_csaf_otUS
MELSEC iQ-R series R16/32/64MTCPU: All versionsall versionscisa_csaf_otUS

showing 20 of 94

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-22-090-04Mitsubishi Electric FA Products2022-03-31icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities may allow an attacker to log in to the affected products and/or alter and obtain sensitive information.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

published 2022-04-01modified 2026-06-17

related (7,714)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-105133US	high7.3OT critical	79.5% (100th)	KEV	2026-10-04
A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component…
CVE-2026-82329US	—OT critical	14.4% (97th)	KEV	2026-08-28
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileg…
CVE-2026-42018US	—OT critical	9.80% (96th)	KEV	2026-08-12
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.
CVE-2026-65400US	—OT critical	1.72% (77th)	KEV	2026-08-06
An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, ma…
CVE-2026-16232US	critical9.8OT critical	3.52% (89th)	KEV	2026-07-22
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to au…

+7709 more

references (12)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan