Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitsubishiCVE-2022-25155
HistoryApr 01, 2022 - 11:15 p.m.

CVE-2022-25155

2022-04-0123:15:14
CWE-287
Mitsubishi
web.nvd.nist.gov
63
mitsubishi electric
melsec
iq-f
iq-r
cpu
authentication
vulnerability
cve-2022-25155
security

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.004

Percentile

74.3%

JSON

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U© CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions, Mitsubishi Electric MELSEC iQ-R series RJ71GN11-T2 all versions, Mitsubishi Electric MELSEC iQ-R series RJ71GN11-EIP all versions, Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions, Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions, Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions, Mitsubishi Electric MELSEC Q series Q03UDECPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/10/13/20/26/50/100UDEHCPU all versions, Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions, Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions, Mitsubishi Electric MELSEC Q series QJ72BR15 all versions, Mitsubishi Electric MELSEC Q series QJ72LP25(-25/G/GE) all versions, Mitsubishi Electric MELSEC L series L02/06/26CPU(-P) all versions, Mitsubishi Electric MELSEC L series L26CPU-(P)BT all versions, Mitsubishi Electric MELSEC L series LJ71C24(-R2) all versions, Mitsubishi Electric MELSEC L series LJ71E71-100 all versions and Mitsubishi Electric MELSEC L series LJ72GF15-T2 all versions allows a remote unauthenticated attacker to login to the product by replaying an eavesdropped password hash.

Affected configurations

Nvd
Node
mitsubishielectricfx5uc_firmwareMatch-
AND
mitsubishielectricfx5ucMatch-
Node
mitsubishielectricfx5uc-32mr\/ds-ts_firmwareMatch-
AND
mitsubishielectricfx5uc-32mr\/ds-tsMatch-
Node
mitsubishielectricfx5uc-32mt\/d_firmwareMatch-
AND
mitsubishielectricfx5uc-32mt\/dMatch-
Node
mitsubishielectricfx5uc-32mt\/dss_firmwareMatch-
AND
mitsubishielectricfx5uc-32mt\/dssMatch-
Node
mitsubishielectricfx5uj-24mr\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-24mr\/esMatch-
Node
mitsubishielectricfx5uj-24mt\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-24mt\/esMatch-
Node
mitsubishielectricfx5uj-24mt\/ess_firmwareMatch-
AND
mitsubishielectricfx5uj-24mt\/essMatch-
Node
mitsubishielectricfx5uj-40mr\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-40mr\/esMatch-
Node
mitsubishielectricfx5uj-40mt\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-40mt\/esMatch-
Node
mitsubishielectricfx5uj-40mt\/ess_firmwareMatch-
AND
mitsubishielectricfx5uj-40mt\/essMatch-
Node
mitsubishielectricfx5uj-60mr\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-60mr\/esMatch-
Node
mitsubishielectricfx5uj-60mt\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-60mt\/esMatch-
Node
mitsubishielectricfx5uj-60mt\/ess_firmwareMatch-
AND
mitsubishielectricfx5uj-60mt\/essMatch-
Node
mitsubishielectricfx5uc-32mt\/dss-ts_firmwareMatch-
AND
mitsubishielectricfx5uc-32mt\/dss-tsMatch-
Node
mitsubishielectricfx5uc-32mt\/ds-ts_firmwareMatch-
AND
mitsubishielectricfx5uc-32mt\/ds-tsMatch-
Node
mitsubishielectricfx5uj_firmwareMatch-
AND
mitsubishielectricfx5ujMatch-
VendorProductVersionCPE
mitsubishielectricfx5uc_firmware-cpe:2.3:o:mitsubishielectric:fx5uc_firmware:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-cpe:2.3:h:mitsubishielectric:fx5uc:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mr\/ds-ts_firmware-cpe:2.3:o:mitsubishielectric:fx5uc-32mr\/ds-ts_firmware:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mr\/ds-ts-cpe:2.3:h:mitsubishielectric:fx5uc-32mr\/ds-ts:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mt\/d_firmware-cpe:2.3:o:mitsubishielectric:fx5uc-32mt\/d_firmware:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mt\/d-cpe:2.3:h:mitsubishielectric:fx5uc-32mt\/d:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mt\/dss_firmware-cpe:2.3:o:mitsubishielectric:fx5uc-32mt\/dss_firmware:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mt\/dss-cpe:2.3:h:mitsubishielectric:fx5uc-32mt\/dss:-:*:*:*:*:*:*:*
mitsubishielectricfx5uj-24mr\/es_firmware-cpe:2.3:o:mitsubishielectric:fx5uj-24mr\/es_firmware:-:*:*:*:*:*:*:*
mitsubishielectricfx5uj-24mr\/es-cpe:2.3:h:mitsubishielectric:fx5uj-24mr\/es:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 321

CNA Affected

[
  {
    "product": "Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU; Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU; Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU; Mitsubishi Electric MELSEC iQ-R series RJ71GN11-T2; Mitsubishi Electric MELSEC iQ-R series RJ71GN11-EIP; Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4); Mitsubishi Electric MELSEC iQ-R series RJ71EN71; Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2; Mitsubishi Electric MELSEC Q series Q03UDECPU; Mitsubishi Electric MELSEC Q series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4); Mitsubishi Electric MELSEC Q series QJ71E71-100; Mitsubishi Electric MELSEC Q series QJ72BR15; Mitsubishi Electric MELSEC Q series QJ72LP25(-25/G/GE); Mitsubishi Electric MELSEC L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC L series L26CPU-(P)BT; Mitsubishi Electric MELSEC L series LJ71C24(-R2); Mitsubishi Electric MELSEC L series LJ71E71-100; Mitsubishi Electric MELSEC L series LJ72GF15-T2",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series RJ71GN11-T2 all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series RJ71GN11-EIP all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC Q series Q03UDECPU all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC Q series Q04/06/10/13/20/26/50/100UDEHCPU all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC Q series QJ72BR15 all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC Q series QJ72LP25(-25/G/GE) all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC L series L02/06/26CPU(-P) all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC L series L26CPU-(P)BT all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC L series LJ71C24(-R2) all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC L series LJ71E71-100 all versions"
      },
      {
        "status": "affected",
        "version": "Mitsubishi Electric MELSEC L series LJ72GF15-T2 all versions"
      }
    ]
  }
]

Related

ptsecurity 1
nessus 1
nvd 1
prion 1
cvelist 1
ics 1
ptsecurity
ptsecurity
PT-2021-08: Possibility of authorization in Remote Password mechanism using password hash in FX5U(C) CPU and FX5UJ CPU modules
2021-12-15 00:00:00
nessus
nessus
Mitsubishi Electric FA Products Use of Password Hash Instead of Password For Authentication (CVE-2022-25155)
2022-04-28 00:00:00
nvd
nvd
CVE-2022-25155
2022-04-01 23:15:14
prion
prion
Authentication flaw
2022-04-01 23:15:00
cvelist
cvelist
CVE-2022-25155
2022-04-01 22:17:58
ics
ics
Mitsubishi Electric FA Products (Update A)
2022-06-01 12:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.004

Percentile

74.3%

JSON
Related for CVE-2022-25155
ptsecurity1nessus1nvd1prion1cvelist1ics1