CVE-2022-40265 Details
Description
Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially crafted packets. A system reset is required for recovery.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 24, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://jvn.jp/vu/JVNVU94702422 | CVE | Third Party Advisory |
| https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-017_en.pdf | CVE | Vendor Advisory |
| https://jvn.jp/vu/JVNVU94702422 | [email protected] | Third Party Advisory |
| https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-017_en.pdf | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mitsubishielectric rj71en71 firmware | <= 65 |
CPE
Remediation
| |
| mitsubishielectric rj71en71 | All versions |
CPE
Remediation
| |
| mitsubishielectric r04encpu firmware | <= 65 |
CPE
Remediation
| |
| mitsubishielectric r04encpu | All versions |
CPE
Remediation
| |
| mitsubishielectric r08encpu firmware | <= 65 |
CPE
Remediation
| |
| mitsubishielectric r08encpu | All versions |
CPE
Remediation
| |
| mitsubishielectric r16encpu firmware | <= 65 |
CPE
Remediation
| |
| mitsubishielectric r16encpu | All versions |
CPE
Remediation
| |
| mitsubishielectric r32encpu firmware | <= 65 |
CPE
Remediation
| |
| mitsubishielectric r32encpu | All versions |
CPE
Remediation
| |
| mitsubishielectric r120encpu firmware | <= 65 |
CPE
Remediation
| |
| mitsubishielectric r120encpu | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Dec 6, 2022 | Initial Analysis | [email protected] |