1. Home
  2. CVE Database
  3. CVE-2022-40265
HIGH · 8.6

CVE-2022-40265

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/...

Vulnerability Description

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially crafted packets. A system reset is required for recovery.

CVSS Score

8.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
MitsubishielectricRj71En71 Firmware<= 65
MitsubishielectricRj71En71-
MitsubishielectricR04Encpu Firmware<= 65
MitsubishielectricR04Encpu-
MitsubishielectricR08Encpu Firmware<= 65
MitsubishielectricR08Encpu-
MitsubishielectricR16Encpu Firmware<= 65
MitsubishielectricR16Encpu-
MitsubishielectricR32Encpu Firmware<= 65
MitsubishielectricR32Encpu-
MitsubishielectricR120Encpu Firmware<= 65
MitsubishielectricR120Encpu-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2022-40265?

CVE-2022-40265 is a vulnerability with a CVSS score of 8.6 (HIGH). Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/...

How severe is CVE-2022-40265?

CVE-2022-40265 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-40265?

Check the references section above for vendor advisories and patch information. Affected products include: Mitsubishielectric Rj71En71 Firmware, Mitsubishielectric Rj71En71, Mitsubishielectric R04Encpu Firmware, Mitsubishielectric R04Encpu, Mitsubishielectric R08Encpu Firmware.