Skip to content
OpenAdvisories
High ICSA-22-172-01 1 CVE

Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update C)

Published Jun 14, 2022 · Updated May 30, 2024 · Revision 4

Vendor: Mitsubishi Electric Product: MELIPC Series MI5122-VW CPU Firmware Product: MELSEC iQ-R Series R12CCPU-V CPU Firmware Product: MELSEC L Series L26CPU-(P)BT Product: MELSEC Q Series Q03UDECPU Product: MELSEC Q Series Q04UDECPU Product: MELSEC Q Series Q06UDECPU Product: MELSEC Q Series Q100UDECPU Product: MELSEC Q Series Q10UDECPU Product: MELSEC Q Series Q12DCCPU-V Product: MELSEC Q Series Q13UDECPU Product: MELSEC Q Series Q20UDECPU Product: MELSEC Q Series Q24DHCCPU-LS Product: MELSEC Q Series Q24DHCCPU-V(G) Product: MELSEC Q Series Q26DHCCPU-LS Product: MELSEC Q Series Q26UDECPU Product: MELSEC Q Series Q50UDECPU Product: MELSEC-L Series L02CPU-P Product: MELSEC-L Series L06CPU-P Product: MELSEC-L Series L26CPU-P Product: MELSEC-Q Series Q03UDVCPU Product: MELSEC-Q Series Q04UDPVCPU Product: MELSEC-Q Series Q04UDVCPU Product: MELSEC-Q Series Q06UDPVCPU Product: MELSEC-Q Series Q06UDVCPU Product: MELSEC-Q Series Q13UDPVCPU Product: MELSEC-Q Series Q13UDVCPU Product: MELSEC-Q Series Q26UDPVCPU Product: MELSEC-Q Series Q26UDVCPU

Summary

Successful exploitation of this vulnerability could result in a denial-of-service condition for Ethernet communication. A system restart would be required to restore functionality.

Vulnerabilities 1

  • High 7.5
    CVE-2022-24946

    Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and …

Revision history

  1. #4

    Update C - Product specific update information added to Mitigations section.

  2. #3

    Update B - Additional mitigations added (Q12DCCPU-V, Q24DHCCPU-V (G), Q24/26DHCCPU-LS).

  3. #2

    Update A - Additional affected products added (R12CCPU-V, Q12DCCPU-V, Q24DHCCPU-V (G), Q24/26DHCCPU-LS, MI5122-VW); additional mitigations added (R12CCPU-V, Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU, MI5122-VW)

  4. #1

    Initial Publication

References