CVE-2022-25157

🗓️ 01 Apr 2022 23:15:14Reported by [email protected]Type

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F and iQ-R series CPUs allows remote unauthenticated disclosure/tampering of informatio

Reporter	Title	Published	Views	Family All 14
attackerkb	CVE-2022-25157	1 Apr 202223:15	–	attackerkb
BDU FSTEC	MELSEC iQ-F Series FX5U Password Hash Disclosure	13 Apr 202200:00	–	bdu_fstec
Circl	CVE-2022-25157	2 Apr 202202:20	–	circl
CNNVD	Mitsubishi Electric MELSEC iQ-F series authorization issue vulnerabilities	31 Mar 202200:00	–	cnnvd
CVE	CVE-2022-25157	1 Apr 202222:17	–	cve
Cvelist	CVE-2022-25157	1 Apr 202222:17	–	cvelist
EUVD	EUVD-2022-29900	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric FA Products	31 Mar 202200:00	–	ics
Prion	Authentication flaw	1 Apr 202223:15	–	prion
Positive Technologies	PT-2021-10: Possibility of authorization in the file password mechanism using the password hash value in the FX5U(C) CPU and FX5UJ CPU modules	15 Dec 202100:00	–	ptsecurity

NVD

Node

AND

mitsubishielectric fx5uc_firmwareMatch-

mitsubishielectric fx5ucMatch-

Node

AND

mitsubishielectric fx5uc-32mr/ds-ts_firmwareMatch-

mitsubishielectric fx5uc-32mr/ds-tsMatch-

Node

AND

mitsubishielectric fx5uc-32mt/d_firmwareMatch-

mitsubishielectric fx5uc-32mt/dMatch-

Node

AND

mitsubishielectric fx5uc-32mt/dss_firmwareMatch-

mitsubishielectric fx5uc-32mt/dssMatch-

Node

AND

mitsubishielectric fx5uj-24mr/es_firmwareMatch-

mitsubishielectric fx5uj-24mr/esMatch-

Node

AND

mitsubishielectric fx5uj-24mt/es_firmwareMatch-

mitsubishielectric fx5uj-24mt/esMatch-

Node

AND

mitsubishielectric fx5uj-24mt/ess_firmwareMatch-

mitsubishielectric fx5uj-24mt/essMatch-

Node

AND

mitsubishielectric fx5uj-40mr/es_firmwareMatch-

mitsubishielectric fx5uj-40mr/esMatch-

Node

AND

mitsubishielectric fx5uj-40mt/es_firmwareMatch-

mitsubishielectric fx5uj-40mt/esMatch-

Node

AND

mitsubishielectric fx5uj-40mt/ess_firmwareMatch-

mitsubishielectric fx5uj-40mt/essMatch-

Node

AND

mitsubishielectric fx5uj-60mr/es_firmwareMatch-

mitsubishielectric fx5uj-60mr/esMatch-

Node

AND

mitsubishielectric fx5uj-60mt/es_firmwareMatch-

mitsubishielectric fx5uj-60mt/esMatch-

Node

AND

mitsubishielectric fx5uj-60mt/ess_firmwareMatch-

mitsubishielectric fx5uj-60mt/essMatch-

Node

AND

mitsubishielectric fx5uc-32mt/dss-ts_firmwareMatch-

mitsubishielectric fx5uc-32mt/dss-tsMatch-

Node

AND

mitsubishielectric fx5uc-32mt/ds-ts_firmwareMatch-

mitsubishielectric fx5uc-32mt/ds-tsMatch-

Node

AND

mitsubishielectric fx5uj_firmwareMatch-

mitsubishielectric fx5ujMatch-

Source	Link
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-031_en.pdf
cisa	www.cisa.gov/uscert/ics/advisories/icsa-22-090-04
jvn	www.jvn.jp/vu/JVNVU96577897/index.html

17 Jun 2026 04:33Current

CVSS 26.4

CVSS 3.19.1

EPSS0.02382

CWE-287