CVE-2022-33324

Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions "17" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions "05" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions "07" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.

Vulnerabilidad de liberación o cierre incorrecto de recursos en Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versiones "32" y anteriores, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware Versiones "65" y anteriores, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Versiones de firmware "29" y anteriores, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V todas las versiones, Mitsubishi Electric Corporation MELSEC iQ- Serie L L04/08/16/32HCPU todas las versiones y Mitsubishi Electric Corporation MELIPC Serie MI5122-VW todas las versiones permiten a un atacante remoto no autenticado provocar una condición de Denegación de Servicio (DoS) en la comunicación Ethernet en el módulo mediante el envío de paquetes especialmente manipulados. Se requiere un reinicio del sistema del módulo para la recuperación.

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions "17" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions "05" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions "07" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.

*Credits: N/A

CVSS Scores

NISTv3.1 7.5

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-06-14 CVE Reserved
2022-12-23 CVE Published
2024-07-30 EPSS Updated
2024-09-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-404: Improper Resource Shutdown or Release

CAPEC

References (3)

URL	Tag	Source
https://jvn.jp/vu/JVNVU96883262	Government Resource

URL	Date	SRC

URL	Date	SRC
https://www.cisa.gov/uscert/ics/advisories/icsa-22-356-03	2024-07-04

URL	Date	SRC
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-018_en.pdf	2024-07-04

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R00 Cpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R00 Cpu Firmware"	< 33.0 Search vendor "Mitsubishi" for product "Melsec Iq-r R00 Cpu Firmware" and version " < 33.0"	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R00 Cpu Search vendor "Mitsubishi" for product "Melsec Iq-r R00 Cpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R01 Cpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R01 Cpu Firmware"	< 33.0 Search vendor "Mitsubishi" for product "Melsec Iq-r R01 Cpu Firmware" and version " < 33.0"	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R01 Cpu Search vendor "Mitsubishi" for product "Melsec Iq-r R01 Cpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R02 Cpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R02 Cpu Firmware"	< 33.0 Search vendor "Mitsubishi" for product "Melsec Iq-r R02 Cpu Firmware" and version " < 33.0"	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R02 Cpu Search vendor "Mitsubishi" for product "Melsec Iq-r R02 Cpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R04 Cpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R04 Cpu Firmware"	< 66.0 Search vendor "Mitsubishi" for product "Melsec Iq-r R04 Cpu Firmware" and version " < 66.0"	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R04 Cpu Search vendor "Mitsubishi" for product "Melsec Iq-r R04 Cpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R08 Cpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R08 Cpu Firmware"	< 66.0 Search vendor "Mitsubishi" for product "Melsec Iq-r R08 Cpu Firmware" and version " < 66.0"	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R08 Cpu Search vendor "Mitsubishi" for product "Melsec Iq-r R08 Cpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R16 Cpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R16 Cpu Firmware"	< 66.0 Search vendor "Mitsubishi" for product "Melsec Iq-r R16 Cpu Firmware" and version " < 66.0"	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R16 Cpu Search vendor "Mitsubishi" for product "Melsec Iq-r R16 Cpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R32 Cpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R32 Cpu Firmware"	< 66.0 Search vendor "Mitsubishi" for product "Melsec Iq-r R32 Cpu Firmware" and version " < 66.0"	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R32 Cpu Search vendor "Mitsubishi" for product "Melsec Iq-r R32 Cpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R120 Cpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R120 Cpu Firmware"	< 66.0 Search vendor "Mitsubishi" for product "Melsec Iq-r R120 Cpu Firmware" and version " < 66.0"	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R120 Cpu Search vendor "Mitsubishi" for product "Melsec Iq-r R120 Cpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R04 Sfcpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R04 Sfcpu Firmware"	*	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R04 Sfcpu Search vendor "Mitsubishi" for product "Melsec Iq-r R04 Sfcpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R08 Sfcpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R08 Sfcpu Firmware"	*	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R08 Sfcpu Search vendor "Mitsubishi" for product "Melsec Iq-r R08 Sfcpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R120 Sfcpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R120 Sfcpu Firmware"	*	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R120 Sfcpu Search vendor "Mitsubishi" for product "Melsec Iq-r R120 Sfcpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R16 Sfcpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R16 Sfcpu Firmware"	*	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R16 Sfcpu Search vendor "Mitsubishi" for product "Melsec Iq-r R16 Sfcpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R32 Sfcpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R32 Sfcpu Firmware"	*	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R32 Sfcpu Search vendor "Mitsubishi" for product "Melsec Iq-r R32 Sfcpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R12 Ccpu-v Firmware Search vendor "Mitsubishi" for product "Melsec Iq-r R12 Ccpu-v Firmware"	*	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-r R12 Ccpu-v Search vendor "Mitsubishi" for product "Melsec Iq-r R12 Ccpu-v"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melipc Mi5122-vw Firmware Search vendor "Mitsubishi" for product "Melipc Mi5122-vw Firmware"	*	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melipc Mi5122-vw Search vendor "Mitsubishi" for product "Melipc Mi5122-vw"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-l L04 Hcpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-l L04 Hcpu Firmware"	*	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-l L04 Hcpu Search vendor "Mitsubishi" for product "Melsec Iq-l L04 Hcpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-l L08 Hcpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-l L08 Hcpu Firmware"	*	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-l L08 Hcpu Search vendor "Mitsubishi" for product "Melsec Iq-l L08 Hcpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-l L16 Hcpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-l L16 Hcpu Firmware"	*	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-l L16 Hcpu Search vendor "Mitsubishi" for product "Melsec Iq-l L16 Hcpu"	-	-	Safe
Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-l L32 Hcpu Firmware Search vendor "Mitsubishi" for product "Melsec Iq-l L32 Hcpu Firmware"	*	-	Affected	in	Mitsubishi Search vendor "Mitsubishi"	Melsec Iq-l L32 Hcpu Search vendor "Mitsubishi" for product "Melsec Iq-l L32 Hcpu"	-	-	Safe