Read the docs
TI-2022-19113 Aliases CVE-2022-40267GHSA-9vv4-3cf7-mqqr

Authentication Bypass Vulnerability in Web Server Function on MELSEC Series

Priority HIGH 72CWE-337Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/z (x=24,40,60, y=T,R, z=ES,ESS) versions 1.042 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/ES-A (x=24,40,60, y=T,R) versions 1.043 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-xMy/z (x=30,40,60,80, y=T,R, z=ES,ESS) versions 1.003 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU versions 33 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU versions 66 and prior allows a remote unauthenticated attacker to access the Web server function by guessing the random numbers used for authentication from several used random numbers.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01237 69th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ESall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ESall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Seres FX5U-80MT/ESall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/ESall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/ESall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/ESall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/DSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/DSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/DSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ESSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ESSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/ESSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DSSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DSSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DSSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/Dall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/Dall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/Dall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/DSSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/DSSall versions; all versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DS-TSup to 1.280—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSS-TSup to 1.280—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MR/DS-TSup to 1.280—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R00CPUup to 33—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R01CPUup to 33—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R02CPUup to 33—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R04CPUup to 66—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R08CPUup to 66—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R16CPUup to 66—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R32CPUup to 66—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R120CPUup to 66—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R04ENCPUup to 66—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R08ENCPUup to 66—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R16ENCPUup to 66—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R32ENCPUup to 66—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-R Series R120ENCPUup to 66—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ESup to 1.042—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ESup to 1.042—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ESup to 1.042—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/ESup to 1.042—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/ESup to 1.042—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/ESup to 1.042—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ESSup to 1.042—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ESSup to 1.042—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ESSup to 1.042—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ES-Aup to 1.043—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ES-Aup to 1.043—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ES-Aup to 1.043—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/ES-Aup to 1.043—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/ES-Aup to 1.043—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/ES-Aup to 1.043—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MT/ESup to 1.003—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MT/ESup to 1.003—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MT/ESup to 1.003—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MT/ESup to 1.003—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MR/ESup to 1.003—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MR/ESup to 1.003—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MR/ESup to 1.003—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MR/ESup to 1.003—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MT/ESSup to 1.003—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MT/ESSup to 1.003—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MT/ESSup to 1.003—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MT/ESSup to 1.003—No fix listedCNA

CPE configurations NVD · 106

CPEVersionsRoleVendor
cpe:2.3:o:mitsubishielectric:fx5u-80mt\/ess_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5u-80mt\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5u-32mt\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5u-32mt\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5u-64mt\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5u-64mt\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5u-80mt\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5u-80mt\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uc-32mt\/d_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uc-32mt\/d:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
Show 96 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:mitsubishielectric:fx5uc-64mt\/d_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uc-64mt\/d:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uc-96mt\/d_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uc-96mt\/d:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uc-32mt\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uc-32mt\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uc-64mt\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uc-64mt\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uc-96mt\/dss_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uc-96mt\/dss:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uc-32mt\/ds-ts_firmware:*:*:*:*:*:*:*:*before 1.280VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uc-32mt\/ds-ts:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uc-32mt\/dss-ts_firmware:*:*:*:*:*:*:*:*before 1.280VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uc-32mt\/dss-ts:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uc-32mr\/ds-ts_firmware:*:*:*:*:*:*:*:*before 1.280VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uc-32mr\/ds-ts:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r00cpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r00cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r01cpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r01cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r02cpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r02cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r04cpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r04cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r08cpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r08cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r16cpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r16cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r32cpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r32cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r120cpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r120cpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r04encpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r04encpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r08encpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r08encpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r16encpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r16encpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r32encpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r32encpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:r120encpu_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:r120encpu:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-24mt\/es_firmware:*:*:*:*:*:*:*:*before 1.042VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-24mt\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-40mt\/es_firmware:*:*:*:*:*:*:*:*before 1.042VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-40mt\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-60mt\/es_firmware:*:*:*:*:*:*:*:*before 1.042VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-60mt\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-24mr\/es_firmware:*:*:*:*:*:*:*:*before 1.042VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-24mr\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-40mr\/es_firmware:*:*:*:*:*:*:*:*before 1.042VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-40mr\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-60mr\/es_firmware:*:*:*:*:*:*:*:*before 1.042VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-60mr\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-24mt\/ess_firmware:*:*:*:*:*:*:*:*before 1.042VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-24mt\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-40mt\/ess_firmware:*:*:*:*:*:*:*:*before 1.042VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-40mt\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-60mt\/ess_firmware:*:*:*:*:*:*:*:*before 1.042VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-60mt\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-24mt\/es-a_firmware:*:*:*:*:*:*:*:*before 1.043VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-24mt\/es-a:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-40mt\/es-a_firmware:*:*:*:*:*:*:*:*before 1.043VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-40mt\/es-a:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-60mt\/es-a_firmware:*:*:*:*:*:*:*:*before 1.043VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-60mt\/es-a:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-24mr\/es-a_firmware:*:*:*:*:*:*:*:*before 1.043VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-24mr\/es-a:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-40mr\/es-a_firmware:*:*:*:*:*:*:*:*before 1.043VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-40mr\/es-a:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5uj-60mr\/es-a_firmware:*:*:*:*:*:*:*:*before 1.043VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5uj-60mr\/es-a:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-30mt\/es_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-30mt\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-40mt\/es_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-40mt\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-60mt\/es_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-60mt\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-80mt\/es_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-80mt\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-30mr\/es_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-30mr\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-40mr\/es_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-40mr\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-60mr\/es_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-60mr\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-80mr\/es_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-80mr\/es:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-30mt\/ess_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-30mt\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-40mt\/ess_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-40mt\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-60mt\/ess_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-60mt\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.
cpe:2.3:o:mitsubishielectric:fx5s-80mt\/ess_firmware:*:*:*:*:*:*:*:*before 1.003VulnerableMitsubishi Electric Europe B.V.
cpe:2.3:h:mitsubishielectric:fx5s-80mt\/ess:-:*:*:*:*:*:*:*not specified by NVDRunning onMitsubishi Electric Europe B.V.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-40267
  2. 2026-10-03 Alias added: GHSA-9vv4-3cf7-mqqr

References

  • TI-2022-14737 Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64 CVSS 3.1CRITICAL 9.8
  • TI-2023-01345 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module CVSS 3.1CRITICAL 10.0
  • TI-2023-06346 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CVSS 3.1CRITICAL 9.8
  • TI-2023-03131 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series CVSS 3.1CRITICAL 9.8
  • TI-2021-03821 Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool CVSS 3.1CRITICAL 9.8
  • TI-2025-03259 Missing authentication in Mitsubishi Electric Corporation G-50 CVSS 3.1CRITICAL 9.8
See all 151 →

Sources