Read the docs
TI-2022-14743 Aliases CVE-2022-33324GHSA-2j9m-jh56-7553

Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series

Priority LOW 36CWE-404Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-404.

Summary

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions "17" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions "05" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions "07" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.

Why it matters now

EPSS 0.01812 78th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Mitsubishi Electric CorporationMELSEC iQ-R Series R00CPUFirmware versions "32" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R01CPUFirmware versions "32" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R02CPUFirmware versions "32" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R04CPUFirmware versions "65" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R08CPUFirmware versions "65" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R16CPUFirmware versions "65" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R32CPUFirmware versions "65" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R120CPUFirmware versions "65" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R04ENCPUFirmware versions "65" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R08ENCPUFirmware versions "65" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R16ENCPUFirmware versions "65" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R32ENCPUFirmware versions "65" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R120ENCPUFirmware versions "65" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R08SFCPUFirmware versions "29" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R16SFCPUFirmware versions "29" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R32SFCPUFirmware versions "29" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R120SFCPUFirmware versions "29" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R12CCPU-VFirmware versions "17" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-L Series L04HCPUFirmware versions "05" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-L Series L08HCPUFirmware versions "05" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-L Series L16HCPUFirmware versions "05" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-L Series L32HCPUFirmware versions "05" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELIPC Series MI5122-VWFirmware versions "07" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R08PSFCPUFirmware versions "08" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R16PSFCPUFirmware versions "08" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R32PSFCPUFirmware versions "08" and prior—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R120PSFCPUFirmware versions "08" and prior—No fix listedCNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:o:mitsubishi:melsec_iq-r_r00_cpu_firmware:*:*:*:*:*:*:*:*before 33.0VulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r00_cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r01_cpu_firmware:*:*:*:*:*:*:*:*before 33.0VulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r01_cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r02_cpu_firmware:*:*:*:*:*:*:*:*before 33.0VulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r02_cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r04_cpu_firmware:*:*:*:*:*:*:*:*before 66.0VulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r04_cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r08_cpu_firmware:*:*:*:*:*:*:*:*before 66.0VulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r08_cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r00_cpu_firmware:*:*:*:*:*:*:*:* Versions before 33.0 Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r00_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r01_cpu_firmware:*:*:*:*:*:*:*:* Versions before 33.0 Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r01_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r02_cpu_firmware:*:*:*:*:*:*:*:* Versions before 33.0 Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r02_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r04_cpu_firmware:*:*:*:*:*:*:*:* Versions before 66.0 Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r04_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r08_cpu_firmware:*:*:*:*:*:*:*:* Versions before 66.0 Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r08_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:mitsubishi:melsec_iq-r_r16_cpu_firmware:*:*:*:*:*:*:*:*before 66.0VulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r16_cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r32_cpu_firmware:*:*:*:*:*:*:*:*before 66.0VulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r32_cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r120_cpu_firmware:*:*:*:*:*:*:*:*before 66.0VulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r120_cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r04_sfcpu_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r04_sfcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r08_sfcpu_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r08_sfcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r120_sfcpu_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r120_sfcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r16_sfcpu_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r16_sfcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r32_sfcpu_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r32_sfcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-r_r12_ccpu-v_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-r_r12_ccpu-v:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melipc_mi5122-vw_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi
cpe:2.3:h:mitsubishi:melipc_mi5122-vw:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-l_l04_hcpu_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-l_l04_hcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-l_l08_hcpu_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-l_l08_hcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-l_l16_hcpu_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-l_l16_hcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
cpe:2.3:o:mitsubishi:melsec_iq-l_l32_hcpu_firmware:*:*:*:*:*:*:*:*all versionsVulnerableMitsubishi
cpe:2.3:h:mitsubishi:melsec_iq-l_l32_hcpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r16_cpu_firmware:*:*:*:*:*:*:*:* Versions before 66.0 Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r16_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r32_cpu_firmware:*:*:*:*:*:*:*:* Versions before 66.0 Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r32_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r120_cpu_firmware:*:*:*:*:*:*:*:* Versions before 66.0 Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r120_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r04_sfcpu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r04_sfcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r08_sfcpu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r08_sfcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r120_sfcpu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r120_sfcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r16_sfcpu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r16_sfcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r32_sfcpu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r32_sfcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-r_r12_ccpu-v_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-r_r12_ccpu-v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melipc_mi5122-vw_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melipc_mi5122-vw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-l_l04_hcpu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-l_l04_hcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-l_l08_hcpu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-l_l08_hcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-l_l16_hcpu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-l_l16_hcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi
  • cpe:2.3:o:mitsubishi:melsec_iq-l_l32_hcpu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Mitsubishi
  • cpe:2.3:h:mitsubishi:melsec_iq-l_l32_hcpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-33324
  2. 2026-10-03 Alias added: GHSA-2j9m-jh56-7553

References

  • TI-2022-14737 Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64 CVSS 3.1CRITICAL 9.8
  • TI-2022-19113 Authentication Bypass Vulnerability in Web Server Function on MELSEC Series CVSS 3.1CRITICAL 9.1
  • TI-2023-01345 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module CVSS 3.1CRITICAL 10.0
  • TI-2023-06346 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CVSS 3.1CRITICAL 9.8
  • TI-2023-03131 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series CVSS 3.1CRITICAL 9.8
  • TI-2021-03821 Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool CVSS 3.1CRITICAL 9.8
See all 151 →

Sources