CVE-2022-40265 — Denial of Service (DoS) Vulnerability in MELSEC iQ-R Series Ethernet Interface Module

Description (CNA)

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially crafted packets. A system reset is required for recovery.

Affected (CNA)

Vendor / product	Versions
Mitsubishi Electric Corporation / MELSEC iQ-R Series RJ71EN71	affected Firmware version "65" and prior
Mitsubishi Electric Corporation / MELSEC iQ-R Series R04/08/16/32/120ENCPU	affected Network Part Firmware version "65" and prior

CWE

CWE-20

References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-017_en.pdf
https://jvn.jp/vu/JVNVU94702422

ADP enrichment

CVE

No English description supplied.

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-017_en.pdf
https://jvn.jp/vu/JVNVU94702422

CISA-ADP

No English description supplied.

No references supplied.