Skip to content
Fencer Vulns
high 7.5

CVE-2022-24946 json

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi El…

published 2022-06-15 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-29701

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.8%
EPSS 1.8% chance of exploitation in 30 days, percentile 78%
public exploits
0
none known

Summary

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-22-172-01 updated cvss 7.5

Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update C)

  • Mitsubishi Electric MELIPC Series MI5122-VW CPU Firmware <=05 Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V CPU Firmware <=16
    affected: mitigation “Mitsubishi has fixed the vulnerability in the following products:” mitsubishielectric.com
  • Mitsubishi Electric MELSEC L Series L02CPU(-P) <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC L Series L06CPU(-P) <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC L Series L26CPU-(P)BT <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC L Series L26CPU(-P) <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC Q Series Q03UDECPU <=with_the_first_5_digits_of_serial_number_24061 Mitsubishi Electric MELSEC Q Series Q03UDVCPU <=with_the_first_5_digits_of_serial_number_24051
    +20 more products
    Mitsubishi Electric MELSEC Q Series Q04UDECPU <=with_the_first_5_digits_of_serial_number_24061 Mitsubishi Electric MELSEC Q Series Q04UDPVCPU <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC Q Series Q04UDVCPU <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC Q Series Q06UDECPU <=with_the_first_5_digits_of_serial_number_24061 Mitsubishi Electric MELSEC Q Series Q06UDPVCPU <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC Q Series Q06UDVCPU <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC Q Series Q10UDECPU <=with_the_first_5_digits_of_serial_number_24061 Mitsubishi Electric MELSEC Q Series Q12DCCPU-V <=with_the_first_5_digits_of_serial_number_25061 Mitsubishi Electric MELSEC Q Series Q13UDECPU <=with_the_first_5_digits_of_serial_number_24061 Mitsubishi Electric MELSEC Q Series Q13UDPVCPU <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC Q Series Q13UDVCPU <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC Q Series Q20UDECPU <=with_the_first_5_digits_of_serial_number_24061 Mitsubishi Electric MELSEC Q Series Q24DHCCPU-LS <=with_the_first_5_digits_of_serial_number_25061 Mitsubishi Electric MELSEC Q Series Q24DHCCPU-V(G) <=with_the_first_5_digits_of_serial_number_25061 Mitsubishi Electric MELSEC Q Series Q26DHCCPU-LS <=with_the_first_5_digits_of_serial_number_25061 Mitsubishi Electric MELSEC Q Series Q26UDECPU <=with_the_first_5_digits_of_serial_number_24061 Mitsubishi Electric MELSEC Q Series Q26UDPVCPU <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC Q Series Q26UDVCPU <=with_the_first_5_digits_of_serial_number_24051 Mitsubishi Electric MELSEC Q Series Q50UDECPU <=with_the_first_5_digits_of_serial_number_24061 Mitsubishi Electric MELSEC Q Series Q100UDECPU <=with_the_first_5_digits_of_serial_number_24061
    affected: vendor fix, mitigation “Mitsubishi has fixed the vulnerability in the following products:” mitsubishielectric.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
5 mo ago

Exploit prediction

1.75% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

  • n/a Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q Series Q03UDECPU; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G); Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC-L series L26CPU-(P)BT; Mitsubishi Electric MELIPC Series MI5122-VW

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.