CVE-2022-24946

Published: Jun 15, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.

Affected (32)

Products: Mitsubishielectric: Q03udecpu Firmware, Q04udehcpu Firmware, Q04udpvcpu Firmware, Q04udvcpu Firmware, Q100udehcpu Firmware, Q50udehcpu Firmware, Q26dhccpu Ls Firmware, Q26udehcpu Firmware, Q26udpvcpu Firmware, Q26udvcpu Firmware, Q20udehcpu Firmware, Q13udehcpu Firmware, Q13udpvcpu Firmware, Q13udvcpu Firmware, Q10udehcpu Firmware, Q06ccpu V Firmware, Q06phcpu Firmware, Q06udehcpu Firmware, Q06udpvcpu Firmware, Q06udvcpu Firmware, L02cpu Firmware, L02cpu P Firmware, L02scpu Firmware, L02scpu P Firmware, L06cpu Firmware, L06cpu P Firmware, L26cpu Firmware, L26cpu Pbt Firmware, L26cpu Bt Firmware, L26cpu Bt Cm Firmware, L26cpu P Firmware

31 products

Q26dhccpu Ls Firmware

L26cpu Bt Cm Firmware

L26cpu P Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q03udecpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q03udecpu	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q04udehcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q04udehcpu	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q04udpvcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q04udpvcpu	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q04udvcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q04udvcpu	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q100udehcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q100udehcpu	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q50udehcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q50udehcpu	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q26dhccpu Ls Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q26dhccpu Ls	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q26udehcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q26udehcpu	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q26udpvcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q26udpvcpu	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q26udvcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q26udvcpu	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q20udehcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q20udehcpu	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q13udehcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q13udehcpu	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q13udpvcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q13udpvcpu	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q13udvcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q13udvcpu	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q10udehcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q10udehcpu	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q06ccpu V Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q06ccpu V	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q06phcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q06phcpu	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q06udehcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q06udehcpu	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q06udpvcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q06udpvcpu	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q06udvcpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Q06udvcpu	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L02cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L02cpu	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L02cpu P Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L02cpu P	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L02scpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L02scpu	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L02scpu P Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L02scpu P	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L06cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L06cpu	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L06cpu P Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L06cpu P	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L26cpu Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L26cpu	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L26cpu (p)bt Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L26cpu (p)bt	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L26cpu Bt Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L26cpu Bt	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L26cpu Bt Cm Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L26cpu Bt Cm	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L26cpu P Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L26cpu P	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric L26cpu Pbt Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric L26cpu Pbt	All versions

Related CWEs

CWE-413

Improper Resource Locking

The product does not lock or does not correctly lock a resource when the product must have exclusive access to the resource.

CWE-667

Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

References (6)

https://jvn.jp/vu/JVNVU90895626/index.html

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-172-01

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-007_en.pdf

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Vendor Advisory

https://jvn.jp/vu/JVNVU90895626/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-172-01

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-007_en.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.