8.6

CVE-2022-40265

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially crafted packets. A system reset is required for recovery.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mitsubishielectric ≫ Rj71en71 Firmware Version <= 65
   Mitsubishielectric ≫ Rj71en71 Version-
Mitsubishielectric ≫ R04encpu Firmware Version <= 65
   Mitsubishielectric ≫ R04encpu Version-
Mitsubishielectric ≫ R08encpu Firmware Version <= 65
   Mitsubishielectric ≫ R08encpu Version-
Mitsubishielectric ≫ R16encpu Firmware Version <= 65
   Mitsubishielectric ≫ R16encpu Version-
Mitsubishielectric ≫ R32encpu Firmware Version <= 65
   Mitsubishielectric ≫ R32encpu Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.51
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://jvn.jp/vu/JVNVU94702422
Third Party Advisory