Read the docs
TI-2022-08745 Aliases CVE-2022-24946GHSA-xwg7-jq5f-xfcj

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series…

Priority MEDIUM 42CWE-413Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-667 and the CVSS impact.

Summary

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01751 77th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q Series Q03UDECPU; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G); Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC-L series L26CPU-(P)BT; Mitsubishi Electric MELIPC Series MI5122-VWMitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior; Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions; Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior—No fix listedCNA
  • Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q Series Q03UDECPU; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G); Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC-L series L26CPU-(P)BT; Mitsubishi Electric MELIPC Series MI5122-VW Vendor— Affected Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior; Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions; Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior Fixed in — No fix listed CNA

CPE configurations NVD · 64

CPEVersionsRoleVendor
cpe:2.3:o:mitsubishielectric:q03udecpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q03udecpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q04udehcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q04udehcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q04udpvcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q04udpvcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q04udvcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q04udvcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q100udehcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q100udehcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
Show 54 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:mitsubishielectric:q50udehcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q50udehcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q26dhccpu-ls_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q26dhccpu-ls:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q26udehcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q26udehcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q26udpvcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q26udpvcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q26udvcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q26udvcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q20udehcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q20udehcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q13udehcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q13udehcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q13udpvcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q13udpvcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q13udvcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q13udvcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q10udehcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q10udehcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q06ccpu-v_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q06ccpu-v:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q06phcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q06phcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q06udehcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q06udehcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q06udpvcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q06udpvcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:q06udvcpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:q06udvcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l02cpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l02cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l02cpu-p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l02cpu-p:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l02scpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l02scpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l02scpu-p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l02scpu-p:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l06cpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l06cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l06cpu-p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l06cpu-p:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l26cpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l26cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l26cpu-\(p\)bt_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l26cpu-\(p\)bt:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l26cpu-bt_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l26cpu-bt:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l26cpu-bt-cm_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l26cpu-bt-cm:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l26cpu-p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l26cpu-p:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:l26cpu-pbt_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:l26cpu-pbt:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-24946
  2. 2026-10-03 Alias added: GHSA-xwg7-jq5f-xfcj

References

  • TI-2020-04497 Uncontrolled resource consumption in Mitsubishi Electric Corporation MELSOFT transmission… CVSS 3.1HIGH 7.5

Sources