CVE-2022-25160

Severity Score

5.9

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R16/32/64MTCPU all versions, Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions, Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions, Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions, Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions and Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions allows a remote unauthenticated attacker to disclose a file in a legitimate user's product by using previously eavesdropped cleartext information and to counterfeit a legitimate user’s system.

Vulnerabilidad de almacenamiento de texto claro de información sensible en la CPU de la serie MELSEC iQ-F de Mitsubishi Electric FX5U(C) todas las versiones, la CPU de la serie MELSEC iQ-F de Mitsubishi Electric FX5UJ todas las versiones, la CPU de la serie MELSEC iQ-R de Mitsubishi Electric R00/01/02CPU todas las versiones, la CPU de la serie MELSEC iQ-R de Mitsubishi Electric R04/08/16/32/120(ES)todas las versiones, Mitsubishi Electric MELSEC iQ-R serie R08/16/32/120SFCPU todas las versiones, Mitsubishi Electric MELSEC iQ-R serie R08/16/32/120PCPU todas las versiones, Mitsubishi Electric MELSEC iQ-R serie R08/16/32/120PSFCPU todas las versiones, Mitsubishi Electric MELSEC iQ-R serie R16/32/64MTCPU todas las versiones, Mitsubishi Electric MELSEC iQ-R serie RJ71C24(-R2/R4) todas las versiones, Mitsubishi Electric MELSEC iQ-R serie RJ71EN71 todas las versiones, Mitsubishi Electric MELSEC iQ-R serie RJ72GF15-T2 todas las versiones, Mitsubishi Electric MELSEC Q serie Q03/04/06/13/26UDVCPU todas las versiones, Mitsubishi Electric MELSEC Q serie Q04/06/13/26UDPVCPU todas las versiones, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) todas las versiones y Mitsubishi Electric MELSEC Q series QJ71E71-100 todas las versiones permite a un atacante remoto no autenticado revelar un archivo en el producto de un usuario legítimo utilizando información en texto claro previamente escuchada y falsificar el sistema de un usuario legítimo

*Credits: N/A

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-02-14 CVE Reserved
2022-04-01 CVE Published
2024-08-03 CVE Updated
2024-11-05 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-312: Cleartext Storage of Sensitive Information

CAPEC

References (3)

URL	Tag	Source
https://jvn.jp/vu/JVNVU96577897/index.html	Third Party Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-04	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-031_en.pdf	2022-06-02

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc Firmware Search vendor "Mitsubishielectric" for product "Fx5uc Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc Search vendor "Mitsubishielectric" for product "Fx5uc"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc-32mr\/ds-ts Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-32mr\/ds-ts Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc-32mr\/ds-ts Search vendor "Mitsubishielectric" for product "Fx5uc-32mr\/ds-ts"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc-32mt\/d Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/d Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc-32mt\/d Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/d"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc-32mt\/dss Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/dss Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc-32mt\/dss Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/dss"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-24mr\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-24mr\/es Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-24mr\/es Search vendor "Mitsubishielectric" for product "Fx5uj-24mr\/es"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-24mt\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-24mt\/es Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-24mt\/es Search vendor "Mitsubishielectric" for product "Fx5uj-24mt\/es"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-24mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-24mt\/ess Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-24mt\/ess Search vendor "Mitsubishielectric" for product "Fx5uj-24mt\/ess"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-40mr\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-40mr\/es Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-40mr\/es Search vendor "Mitsubishielectric" for product "Fx5uj-40mr\/es"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-40mt\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-40mt\/es Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-40mt\/es Search vendor "Mitsubishielectric" for product "Fx5uj-40mt\/es"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-40mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-40mt\/ess Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-40mt\/ess Search vendor "Mitsubishielectric" for product "Fx5uj-40mt\/ess"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-60mr\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-60mr\/es Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-60mr\/es Search vendor "Mitsubishielectric" for product "Fx5uj-60mr\/es"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-60mt\/es Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-60mt\/es Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-60mt\/es Search vendor "Mitsubishielectric" for product "Fx5uj-60mt\/es"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-60mt\/ess Firmware Search vendor "Mitsubishielectric" for product "Fx5uj-60mt\/ess Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj-60mt\/ess Search vendor "Mitsubishielectric" for product "Fx5uj-60mt\/ess"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc-32mt\/dss-ts Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/dss-ts Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc-32mt\/dss-ts Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/dss-ts"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc-32mt\/ds-ts Firmware Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/ds-ts Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uc-32mt\/ds-ts Search vendor "Mitsubishielectric" for product "Fx5uc-32mt\/ds-ts"	-	-	Safe
Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj Firmware Search vendor "Mitsubishielectric" for product "Fx5uj Firmware"	-	-	Affected	in	Mitsubishielectric Search vendor "Mitsubishielectric"	Fx5uj Search vendor "Mitsubishielectric" for product "Fx5uj"	-	-	Safe