CVE-2022-25159

Published: Apr 1, 2022Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R16/32/64MTCPU all versions, Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions, Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions, Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions, Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions and Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions allows a remote unauthenticated attacker to login to the product by replay attack.

Affected (16)

Products: Mitsubishielectric: Fx5uc Firmware, Fx5uc 32mr/ds Ts Firmware, Fx5uc 32mt/d Firmware, Fx5uc 32mt/dss Firmware, Fx5uj 24mr/es Firmware, Fx5uj 24mt/es Firmware, Fx5uj 24mt/ess Firmware, Fx5uj 40mr/es Firmware, Fx5uj 40mt/es Firmware, Fx5uj 40mt/ess Firmware, Fx5uj 60mr/es Firmware, Fx5uj 60mt/es Firmware, Fx5uj 60mt/ess Firmware, Fx5uc 32mt/dss Ts Firmware, Fx5uc 32mt/ds Ts Firmware, Fx5uj Firmware

Mitsubishielectric

16 products

Fx5uc Firmware

Fx5uc 32mr/ds Ts Firmware

Fx5uc 32mt/d Firmware

Fx5uc 32mt/dss Firmware

Fx5uj 24mr/es Firmware

Fx5uj 24mt/es Firmware

Fx5uj 24mt/ess Firmware

Fx5uj 40mr/es Firmware

Fx5uj 40mt/es Firmware

Fx5uj 40mt/ess Firmware

Fx5uj 60mr/es Firmware

Fx5uj 60mt/es Firmware

Fx5uj 60mt/ess Firmware

Fx5uc 32mt/dss Ts Firmware

Fx5uc 32mt/ds Ts Firmware

Fx5uj Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mr/ds Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mr/ds Ts	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/d Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/d	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/dss	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mr/es	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mt/es	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mt/ess	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mr/es	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mt/es	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mt/ess	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mr/es	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mt/es	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mt/ess	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/dss Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/dss Ts	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/ds Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/ds Ts	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj	All versions

Related CWEs

CWE-294

Authentication Bypass by Capture-replay

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

References (6)

https://jvn.jp/vu/JVNVU96577897/index.html

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-04

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party AdvisoryUS Government Resource

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-031_en.pdf

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Vendor Advisory

https://jvn.jp/vu/JVNVU96577897/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-04

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-031_en.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.