Riskcovery

CVE-2022-40265

Denial of Service (DoS) Vulnerability in MELSEC iQ-R Series Ethernet Interface Module

State
Published
Severity
8.6 High
Published
Nov 30, 2022
Updated
Apr 24, 2025
Reserved
Sep 8, 2022

Read the record on cve.org

Description

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially crafted packets. A system reset is required for recovery.

Scores

CVSSScoreVectorSource
3.18.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HMitsubishi

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
MELSEC iQ-R Series RJ71EN71Mitsubishi Electric Corporation
  • Firmware version "65" and priorAffected
MELSEC iQ-R Series R04/08/16/32/120ENCPUMitsubishi Electric Corporation
  • Network Part Firmware version "65" and priorAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.