CVE-2022-40267

Authentication Bypass Vulnerability in Web Server Function on MELSEC Series

Published Jan 20, 2023 CVSS 3.1 · 5.9 Medium EPSS 1.2% KEV · Not listed
Description
Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/z (x=24,40,60, y=T,R, z=ES,ESS) versions 1.042 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/ES-A (x=24,40,60, y=T,R) versions 1.043 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-xMy/z (x=30,40,60,80, y=T,R, z=ES,ESS) versions 1.003 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU versions 33 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU versions 66 and prior allows a remote unauthenticated attacker to access the Web server function by guessing the random numbers used for authentication from several used random numbers.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-43565 Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/z (x=24,40,60, y=T,R, z=ES,ESS) versions 1.042 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/ES-A (x=24,40,60, y=T,R) versions 1.043 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-xMy/z (x=30,40,60,80, y=T,R, z=ES,ESS) versions 1.003 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU versions 33 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU versions 66 and prior allows a remote unauthenticated attacker to access the Web server function by guessing the random numbers used for authentication from several used random numbers.
History

No history.

Subscriptions

Mitsubishielectric Fx5s-30mr\/es Fx5s-30mr\/es Firmware Fx5s-30mt\/es Fx5s-30mt\/es Firmware Fx5s-30mt\/ess Fx5s-30mt\/ess Firmware Fx5s-40mr\/es Fx5s-40mr\/es Firmware Fx5s-40mt\/es Fx5s-40mt\/es Firmware Fx5s-40mt\/ess Fx5s-40mt\/ess Firmware Fx5s-60mr\/es Fx5s-60mr\/es Firmware Fx5s-60mt\/es Fx5s-60mt\/es Firmware Fx5s-60mt\/ess Fx5s-60mt\/ess Firmware Fx5s-80mr\/es Fx5s-80mr\/es Firmware Fx5s-80mt\/es Fx5s-80mt\/es Firmware Fx5s-80mt\/ess Fx5s-80mt\/ess Firmware Fx5u-32mt\/dss Fx5u-32mt\/dss Firmware Fx5u-64mt\/dss Fx5u-64mt\/dss Firmware Fx5u-80mt\/dss Fx5u-80mt\/dss Firmware Fx5u-80mt\/ess Fx5u-80mt\/ess Firmware Fx5uc-32mr\/ds-ts Fx5uc-32mr\/ds-ts Firmware Fx5uc-32mt\/d Fx5uc-32mt\/d Firmware Fx5uc-32mt\/ds-ts Fx5uc-32mt\/ds-ts Firmware Fx5uc-32mt\/dss Fx5uc-32mt\/dss-ts Fx5uc-32mt\/dss-ts Firmware Fx5uc-32mt\/dss Firmware Fx5uc-64mt\/d Fx5uc-64mt\/d Firmware Fx5uc-64mt\/dss Fx5uc-64mt\/dss Firmware Fx5uc-96mt\/d Fx5uc-96mt\/d Firmware Fx5uc-96mt\/dss Fx5uc-96mt\/dss Firmware Fx5uj-24mr\/es Fx5uj-24mr\/es-a Fx5uj-24mr\/es-a Firmware Fx5uj-24mr\/es Firmware Fx5uj-24mt\/es Fx5uj-24mt\/es-a Fx5uj-24mt\/es-a Firmware Fx5uj-24mt\/es Firmware Fx5uj-24mt\/ess Fx5uj-24mt\/ess Firmware Fx5uj-40mr\/es Fx5uj-40mr\/es-a Fx5uj-40mr\/es-a Firmware Fx5uj-40mr\/es Firmware Fx5uj-40mt\/es Fx5uj-40mt\/es-a Fx5uj-40mt\/es-a Firmware Fx5uj-40mt\/es Firmware Fx5uj-40mt\/ess Fx5uj-40mt\/ess Firmware Fx5uj-60mr\/es Fx5uj-60mr\/es-a Fx5uj-60mr\/es-a Firmware Fx5uj-60mr\/es Firmware Fx5uj-60mt\/es Fx5uj-60mt\/es-a Fx5uj-60mt\/es-a Firmware Fx5uj-60mt\/es Firmware Fx5uj-60mt\/ess Fx5uj-60mt\/ess Firmware R00cpu R00cpu Firmware R01cpu R01cpu Firmware R02cpu R02cpu Firmware R04cpu R04cpu Firmware R04encpu R04encpu Firmware R08cpu R08cpu Firmware R08encpu R08encpu Firmware R120cpu R120cpu Firmware R120encpu R120encpu Firmware R16cpu R16cpu Firmware R16encpu R16encpu Firmware R32cpu R32cpu Firmware R32encpu R32encpu Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
Mitsubishi
Published
Updated
Aug 3, 2024, 12:14 PM
Reserved
Sep 8, 2022, 7:40 PM
Status
Modified
Published
Jan 20, 2023, 8:15 AM
Modified
Jun 17, 2026, 5:01 AM