Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2022-40267

Authentication Bypass Vulnerability in Web Server Function on MELSEC Series

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mitsubishi

Description

Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/z (x=24,40,60, y=T,R, z=ES,ESS) versions 1.042 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/ES-A (x=24,40,60, y=T,R) versions 1.043 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-xMy/z (x=30,40,60,80, y=T,R, z=ES,ESS) versions 1.003 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU versions 33 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU versions 66 and prior allows a remote unauthenticated attacker to access the Web server function by guessing the random numbers used for authentication from several used random numbers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ES

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Seres FX5U-80MT/ES

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/ES

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/ES

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/ES

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/DS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/DS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/DS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ESS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ESS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/ESS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DSS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DSS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DSS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/D

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/D

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/D

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/DSS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/DSS

Default version status: unaffected

  • serial number 17X**** or later, and versions 1.280 and prioraffected
  • serial number 179**** and prior, and versions 1.074 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS

Default version status: unaffected

  • versions 1.280 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS

Default version status: unaffected

  • versions 1.280 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS

Default version status: unaffected

  • versions 1.280 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R00CPU

Default version status: unaffected

  • versions 33 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R01CPU

Default version status: unaffected

  • versions 33 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R02CPU

Default version status: unaffected

  • versions 33 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R04CPU

Default version status: unaffected

  • versions 66 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R08CPU

Default version status: unaffected

  • versions 66 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R16CPU

Default version status: unaffected

  • versions 66 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R32CPU

Default version status: unaffected

  • versions 66 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R120CPU

Default version status: unaffected

  • versions 66 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R04ENCPU

Default version status: unaffected

  • versions 66 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R08ENCPU

Default version status: unaffected

  • versions 66 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R16ENCPU

Default version status: unaffected

  • versions 66 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R32ENCPU

Default version status: unaffected

  • versions 66 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-R Series R120ENCPU

Default version status: unaffected

  • versions 66 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-24MT/ES

Default version status: unaffected

  • 1.042 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-40MT/ES

Default version status: unaffected

  • 1.042 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-60MT/ES

Default version status: unaffected

  • 1.042 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-24MR/ES

Default version status: unaffected

  • 1.042 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-40MR/ES

Default version status: unaffected

  • 1.042 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-60MR/ES

Default version status: unaffected

  • 1.042 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-24MT/ESS

Default version status: unaffected

  • 1.042 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-40MT/ESS

Default version status: unaffected

  • 1.042 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-60MT/ESS

Default version status: unaffected

  • 1.042 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-24MT/ES-A

Default version status: unaffected

  • 1.043 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-40MT/ES-A

Default version status: unaffected

  • 1.043 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-60MT/ES-A

Default version status: unaffected

  • 1.043 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-24MR/ES-A

Default version status: unaffected

  • 1.043 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-40MR/ES-A

Default version status: unaffected

  • 1.043 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-60MR/ES-A

Default version status: unaffected

  • 1.043 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-30MT/ES

Default version status: unaffected

  • 1.003 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-40MT/ES

Default version status: unaffected

  • 1.003 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-60MT/ES

Default version status: unaffected

  • 1.003 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-80MT/ES

Default version status: unaffected

  • 1.003 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-30MR/ES

Default version status: unaffected

  • 1.003 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-40MR/ES

Default version status: unaffected

  • 1.003 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-60MR/ES

Default version status: unaffected

  • 1.003 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-80MR/ES

Default version status: unaffected

  • 1.003 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-30MT/ESS

Default version status: unaffected

  • 1.003 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-40MT/ESS

Default version status: unaffected

  • 1.003 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-60MT/ESS

Default version status: unaffected

  • 1.003 and prioraffected

Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-80MT/ESS

Default version status: unaffected

  • 1.003 and prioraffected

References