CVE-2022-40265

🗓️ 30 Nov 2022 00:04:43Reported by MitsubishiType

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-40265	30 Nov 202207:29	–	circl
CNNVD	Mitsubishi Electric MELSEC iQ-R series 输入验证错误漏洞	30 Nov 202200:00	–	cnnvd
CNVD	Mitsubishi Electric Corporation MELSEC iQ-R Series Input Validation Error Vulnerability	4 Dec 202200:00	–	cnvd
Cvelist	CVE-2022-40265 Denial of Service (DoS) Vulnerability in MELSEC iQ-R Series Ethernet Interface Module	30 Nov 202200:04	–	cvelist
EUVD	EUVD-2022-43563	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric MELSEC iQ-R Series	1 Dec 202200:00	–	ics
NVD	CVE-2022-40265	30 Nov 202201:15	–	nvd
Prion	Input validation	30 Nov 202201:15	–	prion
Positive Technologies	PT-2022-25310 · Mitsubishi · Melsec Iq-R Series R04/08/16/32/120(En)Cpu +1	30 Nov 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-40265	5 Feb 202519:53	–	redhatcve

NVD

Node

mitsubishielectric rj71en71_firmwareRange≤65

AND

mitsubishielectric rj71en71Match-

Node

mitsubishielectric r04encpu_firmwareRange≤65

AND

mitsubishielectric r04encpuMatch-

Node

mitsubishielectric r08encpu_firmwareRange≤65

AND

mitsubishielectric r08encpuMatch-

Node

mitsubishielectric r16encpu_firmwareRange≤65

AND

mitsubishielectric r16encpuMatch-

Node

mitsubishielectric r32encpu_firmwareRange≤65

AND

mitsubishielectric r32encpuMatch-

Node

mitsubishielectric r120encpu_firmwareRange≤65

AND

mitsubishielectric r120encpuMatch-

[
  {
    "product": "MELSEC iQ-R Series RJ71EN71",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware version \"65\" and prior"
      }
    ]
  },
  {
    "product": "MELSEC iQ-R Series R04/08/16/32/120ENCPU",
    "vendor": "Mitsubishi Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Network Part Firmware version \"65\" and prior"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/vu/JVNVU94702422
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-017_en.pdf

21 Nov 2024 07:21Current

8High risk

Vulners AI Score8

CVSS 3.17.5 - 8.6

EPSS0.00545

SSVC

CWE-20