Lucene search

[email protected]NVD:CVE-2022-25156

HistoryApr 01, 2022 - 11:15 p.m.

CVE-2022-25156

2022-04-0123:15:14

CWE-326

[email protected]

web.nvd.nist.gov

cve-2022-25156

weak hash

mitsubishi electric melsec

remote attack

unauthenticated login

password reversal

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

74.3%

JSON

Use of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U© CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions, Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions, Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions, Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions, Mitsubishi Electric MELSEC Q series Q03UDECPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/10/13/20/26/50/100UDEHCPU all versions, Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions, Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions, Mitsubishi Electric MELSEC Q series QJ72BR15 all versions, Mitsubishi Electric MELSEC Q series QJ72LP25(-25/G/GE) all versions, Mitsubishi Electric MELSEC L series L02/06/26CPU(-P) all versions, Mitsubishi Electric MELSEC L series L26CPU-(P)BT all versions, Mitsubishi Electric MELSEC L series LJ71C24(-R2) all versions, Mitsubishi Electric MELSEC L series LJ71E71-100 all versions and Mitsubishi Electric MELSEC L series LJ72GF15-T2 all versions allows a remote unauthenticated attacker to login to the product by using a password reversed from a previously eavesdropped password hash.

Affected configurations

Nvd

Node

mitsubishielectricfx5uc_firmwareMatch-

AND

mitsubishielectricfx5ucMatch-

Node

mitsubishielectricfx5uc-32mr\/ds-ts_firmwareMatch-

AND

mitsubishielectricfx5uc-32mr\/ds-tsMatch-

Node

mitsubishielectricfx5uc-32mt\/d_firmwareMatch-

AND

mitsubishielectricfx5uc-32mt\/dMatch-

Node

mitsubishielectricfx5uc-32mt\/dss_firmwareMatch-

AND

mitsubishielectricfx5uc-32mt\/dssMatch-

Node

mitsubishielectricfx5uj-24mr\/es_firmwareMatch-

AND

mitsubishielectricfx5uj-24mr\/esMatch-

Node

mitsubishielectricfx5uj-24mt\/es_firmwareMatch-

AND

mitsubishielectricfx5uj-24mt\/esMatch-

Node

mitsubishielectricfx5uj-24mt\/ess_firmwareMatch-

AND

mitsubishielectricfx5uj-24mt\/essMatch-

Node

mitsubishielectricfx5uj-40mr\/es_firmwareMatch-

AND

mitsubishielectricfx5uj-40mr\/esMatch-

Node

mitsubishielectricfx5uj-40mt\/es_firmwareMatch-

AND

mitsubishielectricfx5uj-40mt\/esMatch-

Node

mitsubishielectricfx5uj-40mt\/ess_firmwareMatch-

AND

mitsubishielectricfx5uj-40mt\/essMatch-

Node

mitsubishielectricfx5uj-60mr\/es_firmwareMatch-

AND

mitsubishielectricfx5uj-60mr\/esMatch-

Node

mitsubishielectricfx5uj-60mt\/es_firmwareMatch-

AND

mitsubishielectricfx5uj-60mt\/esMatch-

Node

mitsubishielectricfx5uj-60mt\/ess_firmwareMatch-

AND

mitsubishielectricfx5uj-60mt\/essMatch-

Node

mitsubishielectricfx5uc-32mt\/dss-ts_firmwareMatch-

AND

mitsubishielectricfx5uc-32mt\/dss-tsMatch-

Node

mitsubishielectricfx5uc-32mt\/ds-ts_firmwareMatch-

AND

mitsubishielectricfx5uc-32mt\/ds-tsMatch-

Node

mitsubishielectricfx5uj_firmwareMatch-

AND

mitsubishielectricfx5ujMatch-

VendorProductVersionCPE
mitsubishielectricfx5uc_firmware-cpe:2.3:o:mitsubishielectric:fx5uc_firmware:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-cpe:2.3:h:mitsubishielectric:fx5uc:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mr\/ds-ts_firmware-cpe:2.3:o:mitsubishielectric:fx5uc-32mr\/ds-ts_firmware:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mr\/ds-ts-cpe:2.3:h:mitsubishielectric:fx5uc-32mr\/ds-ts:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mt\/d_firmware-cpe:2.3:o:mitsubishielectric:fx5uc-32mt\/d_firmware:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mt\/d-cpe:2.3:h:mitsubishielectric:fx5uc-32mt\/d:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mt\/dss_firmware-cpe:2.3:o:mitsubishielectric:fx5uc-32mt\/dss_firmware:-:*:*:*:*:*:*:*
mitsubishielectricfx5uc-32mt\/dss-cpe:2.3:h:mitsubishielectric:fx5uc-32mt\/dss:-:*:*:*:*:*:*:*
mitsubishielectricfx5uj-24mr\/es_firmware-cpe:2.3:o:mitsubishielectric:fx5uj-24mr\/es_firmware:-:*:*:*:*:*:*:*
mitsubishielectricfx5uj-24mr\/es-cpe:2.3:h:mitsubishielectric:fx5uj-24mr\/es:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mitsubishielectric	fx5uc_firmware	-	cpe:2.3:o:mitsubishielectric:fx5uc_firmware:-:::::::*
mitsubishielectric	fx5uc	-	cpe:2.3:h:mitsubishielectric:fx5uc:-:::::::*
mitsubishielectric	fx5uc-32mr\/ds-ts_firmware	-	cpe:2.3:o:mitsubishielectric:fx5uc-32mr\/ds-ts_firmware:-:::::::*
mitsubishielectric	fx5uc-32mr\/ds-ts	-	cpe:2.3:h:mitsubishielectric:fx5uc-32mr\/ds-ts:-:::::::*
mitsubishielectric	fx5uc-32mt\/d_firmware	-	cpe:2.3:o:mitsubishielectric:fx5uc-32mt\/d_firmware:-:::::::*
mitsubishielectric	fx5uc-32mt\/d	-	cpe:2.3:h:mitsubishielectric:fx5uc-32mt\/d:-:::::::*
mitsubishielectric	fx5uc-32mt\/dss_firmware	-	cpe:2.3:o:mitsubishielectric:fx5uc-32mt\/dss_firmware:-:::::::*
mitsubishielectric	fx5uc-32mt\/dss	-	cpe:2.3:h:mitsubishielectric:fx5uc-32mt\/dss:-:::::::*
mitsubishielectric	fx5uj-24mr\/es_firmware	-	cpe:2.3:o:mitsubishielectric:fx5uj-24mr\/es_firmware:-:::::::*
mitsubishielectric	fx5uj-24mr\/es	-	cpe:2.3:h:mitsubishielectric:fx5uj-24mr\/es:-:::::::*

Rows per page:

1-10 of 321

References

jvn.jp/vu/JVNVU96577897/index.html

www.cisa.gov/uscert/ics/advisories/icsa-22-090-04

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-031_en.pdf

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

74.3%

JSON

Related for NVD:CVE-2022-25156

nessus1 ptsecurity1 cvelist1 prion1 cve1 ics1