Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update C)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : MELSEC iQ-R, Q, and L Series CPU Module; MELIPC Series CPU Vulnerability : Improper Resource Locking 2. RISK EVALUATION Successful exploitation of this vulnerability...

Mitsubishi Electric MELSEC-Q/L and MELSEC iQ-R

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: MELSEC-Q/L Series and iQ-R Series Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service condition and/or...

CVE-2022-25163

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial number "24061" or prior, Mitsubishi Electric MELSEC-L series LJ71E71-100 first 5 digits of serial number "24061" or prior and Mitsubishi Electric MELSEC iQ-R Series RD81MES96N...

Input validation

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial number "24061" or prior, Mitsubishi Electric MELSEC-L series LJ71E71-100 first 5 digits of serial number "24061" or prior and Mitsubishi Electric MELSEC iQ-R Series RD81MES96N...

CVE-2022-25163

CVE-2022-25163 concerns an Improper Input Validation in Mitsubishi Electric MELSEC-Q Series QJ71E71-100, MELSEC-L Series LJ71E71-100, and MELSEC iQ-R Series RD81MES96N. The vulnerability allows a remote, unauthenticated attacker to cause a DoS or possibly execute malicious code by sending special...

CVE-2022-25163: Improper Input Validation

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial number "24061" or prior, Mitsubishi Electric MELSEC-L series LJ71E71-100 first 5 digits of serial number "24061" or prior and Mitsubishi Electric MELSEC iQ-R Series RD81MES96N...

Multiple Mitsubishi Electric products have vulnerabilities related to input validation errors.

Mitsubishi Electric MELSEC-Q Series and others are products of Mitsubishi Electric, Japan.Mitsubishi Electric MELSEC-Q Series is a programmable logic controller of MELSEC-Q series.Mitsubishi Electric MELSEC-L Series is a programmable logic controller of MELSEC-L series. Mitsubishi Electric MELSEC...

PT-2022-3876

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC-Q Series QJ71E71-100 versions with first 5 digits of serial number 24061 or prior Mitsubishi Electric MELSEC-L Series LJ71E71-100 versions with first 5 digits of serial number 24061 or prior Mitsubishi Electric MELSE...

CVE-2022-25159

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series...

CVE-2022-25159

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series...

CVE-2022-25155

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC...

CVE-2022-25157

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC...

Authentication flaw

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC...

Authentication flaw

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC...

CVE-2022-25160

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series...

CVE-2022-25160

CVE-2022-25160 is a real vulnerability affecting Mitsubishi Electric FA products (MELSEC iQ-F FX5U/FX5UJ, iQ-R series, Q/L series CPUs, among others). The issue is described as cleartext storage of sensitive information that enables a remote, unauthenticated attacker to disclose files from a legi...

CVE-2022-25158

The CVE-2022-25158 vulnerability affects Mitsubishi Electric MELSEC iQ-F series FX5U(C) and FX5UJ; iQ-R series (R00/01/02, R04/08/16/32/120(EN), R08/16/32/120SF/PCPU, RJ71 variants, etc.); Q/L series (Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU, Q03/04/06/13/26UDV/UDPVCPU, etc.); L series (L02/06...

CVE-2022-25159

CVE-2022-25159 describes an Authentication Bypass by Capture-replay affecting Mitsubishi Electric MELSEC iQ-F and iQ-R/Q/L series (FX5U, FX5UJ, R00/01/02, R04/08/16/32/120(EN), R08/16/32/120SF, R16/32/64MT, RJ71C24(-R2/R4), RJ71EN71, RJ72GF15-T2, Q03/04/06/13/26UDV, Q04/06/13/26UDPV, QJ71C24N(-R2...

CVE-2022-25157

CVE-2022-25157 affects Mitsubishi Electric MELSEC iQ-F/R/Q/L series (e.g., FX5U/FX5UJ, R00/01/02/04/08/16/32/120, Q, L lines and related RJ/J/Q modules). The vulnerability arises from using a password hash instead of the actual password for authentication, enabling a remote, unauthenticated attac...

CVE-2022-25156

The CVE-2022-25156 entry concerns Mitsubishi Electric FA products (MELSEC iQ-F FX5U(C)/FX5UJ, iQ-R, Q, L series variants and related RJ71/RJ72 modules) where a weak password hash enables a remote, unauthenticated login by replaying or reversing an eavesdropped password hash. The issue stems from ...