Lucene search

K
nvd[email protected]NVD:CVE-2022-25158
HistoryApr 01, 2022 - 11:15 p.m.

CVE-2022-25158

2022-04-0123:15:14
CWE-312
web.nvd.nist.gov
1

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

0.002 Low

EPSS

Percentile

56.5%

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U© CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions, Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions, Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions, Mitsubishi Electric MELSEC iQ-R series RJ71GF11-T2 all versions, Mitsubishi Electric MELSEC iQ-R series RJ71GP21(S)-SX all versions, Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions, Mitsubishi Electric MELSEC Q series Q03UDECPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/10/13/20/26/50/100UDEHCPU all versions, Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions, Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions, Mitsubishi Electric MELSEC L series L02/06/26CPU(-P) all versions, Mitsubishi Electric MELSEC L series L26CPU-(P)BT all versions, Mitsubishi Electric MELSEC L series LJ71C24(-R2) all versions, Mitsubishi Electric MELSEC L series LJ71E71-100 all versions and Mitsubishi Electric MELSEC L series LJ72GF15-T2 all versions allows a remote attacker to disclose or tamper with a file in which password hash is saved in cleartext.

Affected configurations

NVD
Node
mitsubishielectricfx5uc_firmwareMatch-
AND
mitsubishielectricfx5ucMatch-
Node
mitsubishielectricfx5uc-32mr\/ds-ts_firmwareMatch-
AND
mitsubishielectricfx5uc-32mr\/ds-tsMatch-
Node
mitsubishielectricfx5uc-32mt\/d_firmwareMatch-
AND
mitsubishielectricfx5uc-32mt\/dMatch-
Node
mitsubishielectricfx5uc-32mt\/dss_firmwareMatch-
AND
mitsubishielectricfx5uc-32mt\/dssMatch-
Node
mitsubishielectricfx5uj-24mr\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-24mr\/esMatch-
Node
mitsubishielectricfx5uj-24mt\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-24mt\/esMatch-
Node
mitsubishielectricfx5uj-24mt\/ess_firmwareMatch-
AND
mitsubishielectricfx5uj-24mt\/essMatch-
Node
mitsubishielectricfx5uj-40mr\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-40mr\/esMatch-
Node
mitsubishielectricfx5uj-40mt\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-40mt\/esMatch-
Node
mitsubishielectricfx5uj-40mt\/ess_firmwareMatch-
AND
mitsubishielectricfx5uj-40mt\/essMatch-
Node
mitsubishielectricfx5uj-60mr\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-60mr\/esMatch-
Node
mitsubishielectricfx5uj-60mt\/es_firmwareMatch-
AND
mitsubishielectricfx5uj-60mt\/esMatch-
Node
mitsubishielectricfx5uj-60mt\/ess_firmwareMatch-
AND
mitsubishielectricfx5uj-60mt\/essMatch-
Node
mitsubishielectricfx5uc-32mt\/dss-ts_firmwareMatch-
AND
mitsubishielectricfx5uc-32mt\/dss-tsMatch-
Node
mitsubishielectricfx5uc-32mt\/ds-ts_firmwareMatch-
AND
mitsubishielectricfx5uc-32mt\/ds-tsMatch-
Node
mitsubishielectricfx5uj_firmwareMatch-
AND
mitsubishielectricfx5ujMatch-

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

0.002 Low

EPSS

Percentile

56.5%

Related for NVD:CVE-2022-25158