Lucene search

K
cve[email protected]CVE-2022-33324
HistoryDec 23, 2022 - 3:15 a.m.

CVE-2022-33324

2022-12-2303:15:08
CWE-404
web.nvd.nist.gov
32
cve-2022-33324
improper resource shutdown
mitsubishi electric
melsec iq-r series
denial of service
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

51.8%

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions “32” and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions “65” and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions “29” and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions “17” and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU all versions and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions “07” and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.

Affected configurations

NVD
Node
mitsubishimelsec_iq-r_r00_cpuMatch-
AND
mitsubishimelsec_iq-r_r00_cpu_firmwareRange<33.0
Node
mitsubishimelsec_iq-r_r01_cpuMatch-
AND
mitsubishimelsec_iq-r_r01_cpu_firmwareRange<33.0
Node
mitsubishimelsec_iq-r_r02_cpuMatch-
AND
mitsubishimelsec_iq-r_r02_cpu_firmwareRange<33.0
Node
mitsubishimelsec_iq-r_r04_cpuMatch-
AND
mitsubishimelsec_iq-r_r04_cpu_firmwareRange<66.0
Node
mitsubishimelsec_iq-r_r08_cpuMatch-
AND
mitsubishimelsec_iq-r_r08_cpu_firmwareRange<66.0
Node
mitsubishimelsec_iq-r_r16_cpuMatch-
AND
mitsubishimelsec_iq-r_r16_cpu_firmwareRange<66.0
Node
mitsubishimelsec_iq-r_r32_cpuMatch-
AND
mitsubishimelsec_iq-r_r32_cpu_firmwareRange<66.0
Node
mitsubishimelsec_iq-r_r120_cpuMatch-
AND
mitsubishimelsec_iq-r_r120_cpu_firmwareRange<66.0
Node
mitsubishimelsec_iq-r_r04_sfcpu_firmware
AND
mitsubishimelsec_iq-r_r04_sfcpuMatch-
Node
mitsubishimelsec_iq-r_r08_sfcpu_firmware
AND
mitsubishimelsec_iq-r_r08_sfcpuMatch-
Node
mitsubishimelsec_iq-r_r120_sfcpu_firmware
AND
mitsubishimelsec_iq-r_r120_sfcpuMatch-
Node
mitsubishimelsec_iq-r_r16_sfcpu_firmware
AND
mitsubishimelsec_iq-r_r16_sfcpuMatch-
Node
mitsubishimelsec_iq-r_r32_sfcpu_firmware
AND
mitsubishimelsec_iq-r_r32_sfcpuMatch-
Node
mitsubishimelsec_iq-r_r12_ccpu-v_firmware
AND
mitsubishimelsec_iq-r_r12_ccpu-vMatch-
Node
mitsubishimelipc_mi5122-vw_firmware
AND
mitsubishimelipc_mi5122-vwMatch-
Node
mitsubishimelsec_iq-l_l04_hcpu_firmware
AND
mitsubishimelsec_iq-l_l04_hcpuMatch-
Node
mitsubishimelsec_iq-l_l08_hcpu_firmware
AND
mitsubishimelsec_iq-l_l08_hcpuMatch-
Node
mitsubishimelsec_iq-l_l16_hcpu_firmware
AND
mitsubishimelsec_iq-l_l16_hcpuMatch-
Node
mitsubishimelsec_iq-l_l32_hcpu_firmware
AND
mitsubishimelsec_iq-l_l32_hcpuMatch-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R00CPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"32\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R01CPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"32\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R02CPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"32\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R04CPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"65\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R08CPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"65\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R16CPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"65\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R32CPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"65\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R120CPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"65\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R04ENCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"65\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R08ENCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"65\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R16ENCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"65\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R32ENCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"65\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R120ENCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"65\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R08SFCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"29\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R16SFCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"29\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R32SFCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"29\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R120SFCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"29\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-R Series R12CCPU-V",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"17\" and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-L Series L04HCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-L Series L08HCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-L Series L16HCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELSEC iQ-L Series L32HCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MELIPC Series MI5122-VW",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware versions \"07\" and prior"
      }
    ]
  }
]

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

51.8%

Related for CVE-2022-33324