Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2022-40265

Denial of Service (DoS) Vulnerability in MELSEC iQ-R Series Ethernet Interface Module

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mitsubishi

Description

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially crafted packets. A system reset is required for recovery.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71

  • Firmware version "65" and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU

  • Network Part Firmware version "65" and prioraffected

References