CVE-2022-33324

Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series

State: Published
Severity: 7.5 High
Published: Dec 23, 2022
Updated: Sep 5, 2024
Reserved: Jun 14, 2022

Description

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions "17" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions "05" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions "07" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Mitsubishi

Weaknesses

CWE-404 Improper Resource Shutdown or Release

Affected Products

Product	Versions
MELSEC iQ-R Series R00CPUMitsubishi Electric Corporation	Firmware versions "32" and priorAffected
MELSEC iQ-R Series R01CPUMitsubishi Electric Corporation	Firmware versions "32" and priorAffected
MELSEC iQ-R Series R02CPUMitsubishi Electric Corporation	Firmware versions "32" and priorAffected
MELSEC iQ-R Series R04CPUMitsubishi Electric Corporation	Firmware versions "65" and priorAffected
MELSEC iQ-R Series R08CPUMitsubishi Electric Corporation	Firmware versions "65" and priorAffected
MELSEC iQ-R Series R16CPUMitsubishi Electric Corporation	Firmware versions "65" and priorAffected
MELSEC iQ-R Series R32CPUMitsubishi Electric Corporation	Firmware versions "65" and priorAffected
MELSEC iQ-R Series R120CPUMitsubishi Electric Corporation	Firmware versions "65" and priorAffected
MELSEC iQ-R Series R04ENCPUMitsubishi Electric Corporation	Firmware versions "65" and priorAffected
MELSEC iQ-R Series R08ENCPUMitsubishi Electric Corporation	Firmware versions "65" and priorAffected
MELSEC iQ-R Series R16ENCPUMitsubishi Electric Corporation	Firmware versions "65" and priorAffected
MELSEC iQ-R Series R32ENCPUMitsubishi Electric Corporation	Firmware versions "65" and priorAffected
MELSEC iQ-R Series R120ENCPUMitsubishi Electric Corporation	Firmware versions "65" and priorAffected
MELSEC iQ-R Series R08SFCPUMitsubishi Electric Corporation	Firmware versions "29" and priorAffected
MELSEC iQ-R Series R16SFCPUMitsubishi Electric Corporation	Firmware versions "29" and priorAffected
MELSEC iQ-R Series R32SFCPUMitsubishi Electric Corporation	Firmware versions "29" and priorAffected
MELSEC iQ-R Series R120SFCPUMitsubishi Electric Corporation	Firmware versions "29" and priorAffected
MELSEC iQ-R Series R12CCPU-VMitsubishi Electric Corporation	Firmware versions "17" and priorAffected
MELSEC iQ-L Series L04HCPUMitsubishi Electric Corporation	Firmware versions "05" and priorAffected
MELSEC iQ-L Series L08HCPUMitsubishi Electric Corporation	Firmware versions "05" and priorAffected
MELSEC iQ-L Series L16HCPUMitsubishi Electric Corporation	Firmware versions "05" and priorAffected
MELSEC iQ-L Series L32HCPUMitsubishi Electric Corporation	Firmware versions "05" and priorAffected
MELIPC Series MI5122-VWMitsubishi Electric Corporation	Firmware versions "07" and priorAffected
MELSEC iQ-R Series R08PSFCPUMitsubishi Electric Corporation	Firmware versions "08" and priorAffected
MELSEC iQ-R Series R16PSFCPUMitsubishi Electric Corporation	Firmware versions "08" and priorAffected
MELSEC iQ-R Series R32PSFCPUMitsubishi Electric Corporation	Firmware versions "08" and priorAffected
MELSEC iQ-R Series R120PSFCPUMitsubishi Electric Corporation	Firmware versions "08" and priorAffected

References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-018_en.pdfvendor-advisory
https://jvn.jp/vu/JVNVU96883262government-resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-356-03government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.