CVE-2022-25162

MEDIUM

MELSEC iQ-F FX5U/FX5UC/FX5UJ/FX5S < 1.270 - Unauthenticated Denial of Service via Crafted Packets

Title source: llm
STIX 2.1

Description

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later and versions prior to 1.270, Mitsubishi Electric Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 179**** and prior and versions prior to 1.073, MELSEC iQ-F series FX5UC-xMy/z(x=32,64,96, y=T,R, z=D,DSS) with serial number 17X**** or later and versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UC-xMy/z(x=32,64,96, y=T,R, z=D,DSS) with serial number 179**** and prior and versions prior to 1.073, Mitsubishi Electric MELSEC iQ-F series FX5UC-32MT/DS-TS versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UC-32MT/DSS-TS versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UC-32MR/DS-TS versions prior to 1.270, Mitsubishi Electric MELSEC iQ-F series FX5UJ-xMy/z(x=24,40,60, y=T,R, z=ES,ESS) versions prior to 1.030, Mitsubishi Electric MELSEC iQ-F series FX5UJ-xMy/ES-A(x=24,40,60, y=T,R) versions prior to 1.031 and Mitsubishi Electric MELSEC iQ-F series FX5S-xMy/z(x=30,40,60,80, y=T,R, z=ES,ESS) version 1.000 allows a remote unauthenticated attacker to cause a temporary DoS condition for the product's communication by sending specially crafted packets.

References (3)

Core 3
Core References
Third Party Advisory x_refsource_misc
https://jvn.jp/vu/JVNVU95926817/index.html
Third Party Advisory, US Government Resource x_refsource_misc
https://www.cisa.gov/uscert/ics/advisories/icsa-22-139-01

Scores

CVSS v3 5.3
EPSS 0.0024
EPSS Percentile 46.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Details

CWE
CWE-20
Status published
Products (50)
mitsubhishielectric/melsec_iq-fx5u-32mr\/ds_firmware < 1.073
mitsubhishielectric/melsec_iq-fx5u-32mr\/dss_firmware < 1.073
mitsubhishielectric/melsec_iq-fx5u-32mr\/es_firmware < 1.073
mitsubhishielectric/melsec_iq-fx5u-32mr\/ess_firmware < 1.073
mitsubhishielectric/melsec_iq-fx5u-32mt\/ds_firmware < 1.073
mitsubhishielectric/melsec_iq-fx5u-32mt\/dss_firmware < 1.073
mitsubhishielectric/melsec_iq-fx5u-32mt\/es_firmware < 1.073
mitsubhishielectric/melsec_iq-fx5u-32mt\/ess_firmware < 1.073
mitsubhishielectric/melsec_iq-fx5u-64mr\/ds_firmware < 1.073
mitsubhishielectric/melsec_iq-fx5u-64mr\/dss_firmware < 1.073
... and 40 more
Published May 18, 2022
Tracked Since Feb 18, 2026