Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-667 and the CVSS impact.
Summary
Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q Series Q03UDECPU; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G); Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC-L series L26CPU-(P)BT; Mitsubishi Electric MELIPC Series MI5122-VW | Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior; Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions; Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior | — | No fix listed | CNA |
- Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q Series Q03UDECPU; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G); Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC-L series L26CPU-(P)BT; Mitsubishi Electric MELIPC Series MI5122-VW Vendor— Affected Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior; Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions; Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior; Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior Fixed in — No fix listed CNA
CPE configurations NVD · 64
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:mitsubishielectric:q03udecpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q03udecpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q04udehcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q04udehcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q04udpvcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q04udpvcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q04udvcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q04udvcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q100udehcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q100udehcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
- cpe:2.3:o:mitsubishielectric:q03udecpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q03udecpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q04udehcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q04udehcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q04udpvcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q04udpvcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q04udvcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q04udvcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q100udehcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q100udehcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
Show 54 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:mitsubishielectric:q50udehcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q50udehcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q26dhccpu-ls_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q26dhccpu-ls:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q26udehcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q26udehcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q26udpvcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q26udpvcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q26udvcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q26udvcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q20udehcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q20udehcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q13udehcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q13udehcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q13udpvcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q13udpvcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q13udvcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q13udvcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q10udehcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q10udehcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q06ccpu-v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q06ccpu-v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q06phcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q06phcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q06udehcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q06udehcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q06udpvcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q06udpvcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:q06udvcpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:q06udvcpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l02cpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l02cpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l02cpu-p_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l02cpu-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l02scpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l02scpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l02scpu-p_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l02scpu-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l06cpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l06cpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l06cpu-p_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l06cpu-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l26cpu_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l26cpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l26cpu-\(p\)bt_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l26cpu-\(p\)bt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l26cpu-bt_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l26cpu-bt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l26cpu-bt-cm_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l26cpu-bt-cm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l26cpu-p_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l26cpu-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:l26cpu-pbt_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:l26cpu-pbt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
- cpe:2.3:o:mitsubishielectric:q50udehcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q50udehcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q26dhccpu-ls_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q26dhccpu-ls:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q26udehcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q26udehcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q26udpvcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q26udpvcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q26udvcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q26udvcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q20udehcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q20udehcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q13udehcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q13udehcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q13udpvcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q13udpvcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q13udvcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q13udvcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q10udehcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q10udehcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q06ccpu-v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q06ccpu-v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q06phcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q06phcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q06udehcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q06udehcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q06udpvcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q06udpvcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:q06udvcpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:q06udvcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l02cpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l02cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l02cpu-p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l02cpu-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l02scpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l02scpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l02scpu-p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l02scpu-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l06cpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l06cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l06cpu-p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l06cpu-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l26cpu_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l26cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l26cpu-\(p\)bt_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l26cpu-\(p\)bt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l26cpu-bt_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l26cpu-bt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l26cpu-bt-cm_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l26cpu-bt-cm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l26cpu-p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l26cpu-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:l26cpu-pbt_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:l26cpu-pbt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-24946
- 2026-10-03 Alias added: GHSA-xwg7-jq5f-xfcj
References
More Mitsubishi Electric Europe B.V. L02cpu-p Firmware vulnerabilities
- TI-2020-04497 Uncontrolled resource consumption in Mitsubishi Electric Corporation MELSOFT transmission… CVSS 3.1HIGH 7.5
Sources
- CVE-2022-24946 · CVE Program
- CVE-2022-24946 · NVD
- FIRST EPSS
- GHSA-xwg7-jq5f-xfcj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences