Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2022-40267

MEDIUM
Published 2023-01-20T07:52:56.784Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2022-40267. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1
5.9
/10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score Metrics
Exploitability: N/A Impact: N/A

EPSS Score

v2025.03.14
0.022
probability
of exploitation in the wild

There is a 2.2% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-06-25
Exploit Probability
Percentile: 0.838
Higher than 83.8% of all CVEs

Attack Vector Metrics

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED

Impact Metrics

Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Description

Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/z (x=24,40,60, y=T,R, z=ES,ESS) versions 1.042 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/ES-A (x=24,40,60, y=T,R) versions 1.043 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-xMy/z (x=30,40,60,80, y=T,R, z=ES,ESS) versions 1.003 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU versions 33 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU versions 66 and prior allows a remote unauthenticated attacker to access the Web server function by guessing the random numbers used for authentication from several used random numbers.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-32MT/ES

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-64MT/ES

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Seres FX5U-80MT/ES

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-32MR/ES

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-64MR/ES

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-80MR/ES

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-32MT/DS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-64MT/DS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-80MT/DS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-32MR/DS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-64MR/DS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-80MR/DS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-32MT/ESS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-64MT/ESS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-80MT/ESS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-32MT/DSS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-64MT/DSS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5U-80MT/DSS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UC-32MT/D

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UC-64MT/D

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UC-96MT/D

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UC-32MT/DSS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UC-64MT/DSS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UC-96MT/DSS

Affected Versions:

serial number 17X**** or later, and versions 1.280 and prior serial number 179**** and prior, and versions 1.074 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UC-32MT/DS-TS

Affected Versions:

versions 1.280 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UC-32MT/DSS-TS

Affected Versions:

versions 1.280 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UC-32MR/DS-TS

Affected Versions:

versions 1.280 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R00CPU

Affected Versions:

versions 33 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R01CPU

Affected Versions:

versions 33 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R02CPU

Affected Versions:

versions 33 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R04CPU

Affected Versions:

versions 66 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R08CPU

Affected Versions:

versions 66 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R16CPU

Affected Versions:

versions 66 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R32CPU

Affected Versions:

versions 66 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R120CPU

Affected Versions:

versions 66 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R04ENCPU

Affected Versions:

versions 66 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R08ENCPU

Affected Versions:

versions 66 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R16ENCPU

Affected Versions:

versions 66 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R32ENCPU

Affected Versions:

versions 66 and prior
Mitsubishi Electric Corporation

MELSEC iQ-R Series R120ENCPU

Affected Versions:

versions 66 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-24MT/ES

Affected Versions:

1.042 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-40MT/ES

Affected Versions:

1.042 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-60MT/ES

Affected Versions:

1.042 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-24MR/ES

Affected Versions:

1.042 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-40MR/ES

Affected Versions:

1.042 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-60MR/ES

Affected Versions:

1.042 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-24MT/ESS

Affected Versions:

1.042 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-40MT/ESS

Affected Versions:

1.042 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-60MT/ESS

Affected Versions:

1.042 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-24MT/ES-A

Affected Versions:

1.043 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-40MT/ES-A

Affected Versions:

1.043 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-60MT/ES-A

Affected Versions:

1.043 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-24MR/ES-A

Affected Versions:

1.043 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-40MR/ES-A

Affected Versions:

1.043 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5UJ-60MR/ES-A

Affected Versions:

1.043 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-30MT/ES

Affected Versions:

1.003 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-40MT/ES

Affected Versions:

1.003 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-60MT/ES

Affected Versions:

1.003 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-80MT/ES

Affected Versions:

1.003 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-30MR/ES

Affected Versions:

1.003 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-40MR/ES

Affected Versions:

1.003 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-60MR/ES

Affected Versions:

1.003 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-80MR/ES

Affected Versions:

1.003 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-30MT/ESS

Affected Versions:

1.003 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-40MT/ESS

Affected Versions:

1.003 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-60MT/ESS

Affected Versions:

1.003 and prior
Mitsubishi Electric Corporation

MELSEC iQ-F Series FX5S-80MT/ESS

Affected Versions:

1.003 and prior
mitsubishielectric

fx5u-80mt\/ess_firmware

Affected Versions:

0
mitsubishielectric

fx5u-32mt\/dss_firmware

Affected Versions:

0
mitsubishielectric

fx5u-64mt\/dss_firmware

Affected Versions:

0
mitsubishielectric

fx5u-80mt\/dss_firmware

Affected Versions:

0
mitsubishielectric

fx5uc-32mt\/d_firmware

Affected Versions:

0
mitsubishielectric

fx5uc-64mt\/d_firmware

Affected Versions:

0
mitsubishielectric

fx5uc-96mt\/d_firmware

Affected Versions:

0
mitsubishielectric

fx5uc-32mt\/dss_firmware

Affected Versions:

0
mitsubishielectric

fx5uc-64mt\/dss_firmware

Affected Versions:

0
mitsubishielectric

fx5uc-96mt\/dss_firmware

Affected Versions:

0
mitsubishielectric

fx5uc-32mt\/ds-ts_firmware

Affected Versions:

0
mitsubishielectric

fx5uc-32mt\/dss-ts_firmware

Affected Versions:

0
mitsubishielectric

fx5uc-32mr\/ds-ts_firmware

Affected Versions:

0
mitsubishielectric

r00cpu_firmware

Affected Versions:

0
mitsubishielectric

r01cpu_firmware

Affected Versions:

0
mitsubishielectric

r02cpu_firmware

Affected Versions:

0
mitsubishielectric

r04cpu_firmware

Affected Versions:

0
mitsubishielectric

r08cpu_firmware

Affected Versions:

0
mitsubishielectric

r16cpu_firmware

Affected Versions:

0
mitsubishielectric

r32cpu_firmware

Affected Versions:

0
mitsubishielectric

r120cpu_firmware

Affected Versions:

0
mitsubishielectric

r04encpu_firmware

Affected Versions:

0
mitsubishielectric

r08encpu_firmware

Affected Versions:

0
mitsubishielectric

r16encpu_firmware

Affected Versions:

0
mitsubishielectric

r32encpu_firmware

Affected Versions:

0
mitsubishielectric

r120encpu_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-24mt\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-40mt\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-60mt\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-24mr\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-40mr\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-60mr\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-24mt\/ess_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-40mt\/ess_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-60mt\/ess_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-24mt\/es-a_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-40mt\/es-a_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-60mt\/es-a_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-24mr\/es-a_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-40mr\/es-a_firmware

Affected Versions:

0
mitsubishielectric

fx5uj-60mr\/es-a_firmware

Affected Versions:

0
mitsubishielectric

fx5s-30mt\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5s-40mt\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5s-60mt\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5s-80mt\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5s-30mr\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5s-40mr\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5s-60mr\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5s-80mr\/es_firmware

Affected Versions:

0
mitsubishielectric

fx5s-30mt\/ess_firmware

Affected Versions:

0
mitsubishielectric

fx5s-40mt\/ess_firmware

Affected Versions:

0
mitsubishielectric

fx5s-60mt\/ess_firmware

Affected Versions:

0
mitsubishielectric

fx5s-80mt\/ess_firmware

Affected Versions:

0

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed CRITICAL

GHSA-9vv4-3cf7-mqqr

Advisory Details

Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU all versions, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU all versions allows a remote unauthenticated attacker to access the Web server function by guessing the random numbers used for authentication from several used random numbers.

CVSS Scoring

CVSS Score

9.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-40267
WEB https://jvn.jp/vu/JVNVU99673580/index.html
WEB https://www.cisa.gov/uscert/ics/advisories/icsa-23-017-02
WEB https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-019_en.pdf

Advisory provided by GitHub Security Advisory Database. Published: January 20, 2023, Modified: January 30, 2023

References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-019_en.pdf
https://jvn.jp/vu/JVNVU99673580/index.html
https://www.cisa.gov/uscert/ics/advisories/icsa-23-017-02
Published: 2023-01-20T07:52:56.784Z
Last Modified: 2024-08-03T12:14:39.972Z
Copied to clipboard!