Denial of Service (DoS) Vulnerability in MELSEC iQ-R Series Ethernet Interface Module
Priority MEDIUM 45CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially crafted packets. A system reset is required for recovery.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01016 63rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Mitsubishi Electric Corporation | MELSEC iQ-R Series RJ71EN71 | Firmware version "65" and prior | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-R Series R04/08/16/32/120ENCPU | Network Part Firmware version "65" and prior | — | No fix listed | CNA |
- MELSEC iQ-R Series RJ71EN71 VendorMitsubishi Electric Corporation Affected Firmware version "65" and prior Fixed in — No fix listed CNA
- MELSEC iQ-R Series R04/08/16/32/120ENCPU VendorMitsubishi Electric Corporation Affected Network Part Firmware version "65" and prior Fixed in — No fix listed CNA
CPE configurations NVD · 12
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:mitsubishielectric:rj71en71_firmware:*:*:*:*:*:*:*:* | up to 65 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:rj71en71:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:r04encpu_firmware:*:*:*:*:*:*:*:* | up to 65 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:r04encpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:r08encpu_firmware:*:*:*:*:*:*:*:* | up to 65 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:r08encpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:r16encpu_firmware:*:*:*:*:*:*:*:* | up to 65 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:r16encpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
| cpe:2.3:o:mitsubishielectric:r32encpu_firmware:*:*:*:*:*:*:*:* | up to 65 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:r32encpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
- cpe:2.3:o:mitsubishielectric:rj71en71_firmware:*:*:*:*:*:*:*:* Versions up to 65 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:rj71en71:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:r04encpu_firmware:*:*:*:*:*:*:*:* Versions up to 65 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:r04encpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:r08encpu_firmware:*:*:*:*:*:*:*:* Versions up to 65 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:r08encpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:r16encpu_firmware:*:*:*:*:*:*:*:* Versions up to 65 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:r16encpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
- cpe:2.3:o:mitsubishielectric:r32encpu_firmware:*:*:*:*:*:*:*:* Versions up to 65 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:r32encpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
Show 2 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:mitsubishielectric:r120encpu_firmware:*:*:*:*:*:*:*:* | up to 65 | Vulnerable | Mitsubishi Electric Europe B.V. |
| cpe:2.3:h:mitsubishielectric:r120encpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mitsubishi Electric Europe B.V. |
- cpe:2.3:o:mitsubishielectric:r120encpu_firmware:*:*:*:*:*:*:*:* Versions up to 65 Vulnerable ·Mitsubishi Electric Europe B.V.
- cpe:2.3:h:mitsubishielectric:r120encpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mitsubishi Electric Europe B.V.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-40265
- 2026-10-03 Alias added: GHSA-vgcx-cp27-7f7h
References
More Mitsubishi Electric Corporation vulnerabilities
- TI-2022-14737 Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64 CVSS 3.1CRITICAL 9.8
- TI-2022-19113 Authentication Bypass Vulnerability in Web Server Function on MELSEC Series CVSS 3.1CRITICAL 9.1
- TI-2023-01345 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module CVSS 3.1CRITICAL 10.0
- TI-2023-06346 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CVSS 3.1CRITICAL 9.8
- TI-2023-03131 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series CVSS 3.1CRITICAL 9.8
- TI-2021-03821 Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool CVSS 3.1CRITICAL 9.8
Sources
- CVE-2022-40265 · CVE Program
- CVE-2022-40265 · NVD
- FIRST EPSS
- GHSA-vgcx-cp27-7f7h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences