What’s Vulnerable › Vulnerabilities

CVE-2022-40265: Denial of Service (DoS) Vulnerability in MELSEC iQ-R Series Ethernet Interface Module

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-30 · updated 2026-06-17
• Weakness: CWE-20

Description

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially crafted packets. A system reset is required for recovery.

Affected products

• Mitsubishielectric R04Encpu Firmware: through 65
• Mitsubishielectric R08Encpu Firmware: through 65
• Mitsubishielectric R120Encpu Firmware: through 65
• Mitsubishielectric R16Encpu Firmware: through 65
• Mitsubishielectric R32Encpu Firmware: through 65
• Mitsubishielectric Rj71En71 Firmware: through 65

References

• https://jvn.jp/vu/JVNVU94702422
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-017_en.pdf
• https://jvn.jp/vu/JVNVU94702422
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-017_en.pdf

Get alerted when CVE-2022-40265 or the next vulnerability affects your stack