CVE-2022-33323 json
Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series
published 2023-02-02 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-36366
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.1%
- EPSS 1.1% chance of exploitation in 30 days, percentile 66%
- public exploits
- 0
- none known
Summary
Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
cisa ICSA-23-026-05 updated cvss 7.5
Mitsubishi Electric MELFA SD/SQ series and F-series Robot Controllers
-
Mitsubishi Electric Corporation MELFA F-Series <= S7x, <= R7x Mitsubishi Electric Corporation MELFA SD/SQ Series <= S7x, <= R7xaffected: mitigation “MELFA SD/SQ Series: Update to firmware version S7y or later” mitsubishielectric.com
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 19 mo ago
Exploit prediction
1.14% chance of exploitation in the next 30 days, higher than 66% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Affected products
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-771 of RV-2SD
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-771 of RV-2SDB
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-721 of RV-3SD
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-721 of RV-3SD-SM
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-721 of RV-3SDC
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-721 of RV-3SDB
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-721 of RV-3SDB-SM
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDBC
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJ
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJ-SM
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJC
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJB
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJB-SM
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-731 of RV-3SDJBC
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-711 of RV-6SD
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-711 of RV-6SDC
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-711 of RV-6SDL
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-711 of RV-6SDLC
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-711M of RV-6SDC-SM
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-711M of RV-6SDLC-SM
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-701M of RV-12SD
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-701 of RV-12SDC
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-701M of RV-12SDL
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR3D-701 of RV-12SDLC
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-781 of RH-3SDHR3515
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-781 of RH-3SDHR3515C
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-781 of RH-3SDHR3515W
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH3520
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH3532
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH4520
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH4532
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH5532
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH5520
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH3517M
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH3517M-SM
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH3527M
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH4517M
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH4527M
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH5517M
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH5517M-SM
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH5527M
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH3517C
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH3527C
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH4517C
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH4527C
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH5517C
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-761 of RH-6SDH5527C
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-741 of RH-12SDH5535
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-741 of RH-12SDH5545
- Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR2DA-741 of RH-12SDH7035
Classification
- Weakness
-
- CWE-489 Active Debug Code
References
-
mitsubishielectric.com
/en/psirt/vulnerability/pdf/2022-020_en.pdf
vendor-advisory
-
jvn.jp
/vu/JVNVU94588481/index.html
third-party-advisory
-
cisa.gov
/uscert/ics/advisories/icsa-23-026-05
third-party-advisory, us-government-resource
Sources
- CVE List CVE-2022-33323
- NVD CVE-2022-33323
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.