CVE-2022-33324
Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions "17" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions "05" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions "07" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions "17" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions "05" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions "07" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.
- Record
CVE-2022-33324- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-404
- Updated
- 2026-11-02
EUVDEUVD-2022-36367
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions "17" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions "05" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions "07" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.
- Record
EUVD-2022-36367- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2j9m-jh56-7553
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ...
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU all versions, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V all versions, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU all versions and Mitsubishi Electric Corporation MELIPC Series MI5122-VW all versions allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.
- Record
GHSA-2j9m-jh56-7553- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-404
- Updated
- 2026-11-02
NVD
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions "17" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions "05" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions "07" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.
- Record
CVE-2022-33324- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-404
- Updated
- 2026-11-02
Affected products
- mitsubishi electric corporation melipc series mi5122-vw
- mitsubishi electric corporation melsec iq-r series r12ccpu-v
- mitsubishi electric corporation melsec iq-l series l04hcpu
- mitsubishi electric corporation melsec iq-l series l08hcpu
- mitsubishi electric corporation melsec iq-l series l16hcpu
- mitsubishi electric corporation melsec iq-l series l32hcpu
- mitsubishi electric corporation melsec iq-r series r00cpu
- mitsubishi electric corporation melsec iq-r series r01cpu
- mitsubishi electric corporation melsec iq-r series r02cpu
- mitsubishi electric corporation melsec iq-r series r04cpu
- mitsubishi electric corporation melsec iq-r series r04encpu
- mitsubishi electric corporation melsec iq-r series r08cpu
Show 34 moreShow less
- mitsubishi electric corporation melsec iq-r series r08encpu
- mitsubishi electric corporation melsec iq-r series r08psfcpu
- mitsubishi electric corporation melsec iq-r series r08sfcpu
- mitsubishi electric corporation melsec iq-r series r120cpu
- mitsubishi electric corporation melsec iq-r series r120encpu
- mitsubishi electric corporation melsec iq-r series r120psfcpu
- mitsubishi electric corporation melsec iq-r series r120sfcpu
- mitsubishi electric corporation melsec iq-r series r16cpu
- mitsubishi electric corporation melsec iq-r series r16encpu
- mitsubishi electric corporation melsec iq-r series r16psfcpu
- mitsubishi electric corporation melsec iq-r series r16sfcpu
- mitsubishi electric corporation melsec iq-r series r32cpu
- mitsubishi electric corporation melsec iq-r series r32encpu
- mitsubishi electric corporation melsec iq-r series r32psfcpu
- mitsubishi electric corporation melsec iq-r series r32sfcpu
- mitsubishi melipc mi5122-vw firmware
- mitsubishi melsec iq-l l04 hcpu firmware
- mitsubishi melsec iq-l l08 hcpu firmware
- mitsubishi melsec iq-l l16 hcpu firmware
- mitsubishi melsec iq-l l32 hcpu firmware
- mitsubishi melsec iq-r r00 cpu firmware
- mitsubishi melsec iq-r r01 cpu firmware
- mitsubishi melsec iq-r r02 cpu firmware
- mitsubishi melsec iq-r r04 cpu firmware
- mitsubishi melsec iq-r r04 sfcpu firmware
- mitsubishi melsec iq-r r08 cpu firmware
- mitsubishi melsec iq-r r08 sfcpu firmware
- mitsubishi melsec iq-r r120 cpu firmware
- mitsubishi melsec iq-r r120 sfcpu firmware
- mitsubishi melsec iq-r r12 ccpu-v firmware
- mitsubishi melsec iq-r r16 cpu firmware
- mitsubishi melsec iq-r r16 sfcpu firmware
- mitsubishi melsec iq-r r32 cpu firmware
- mitsubishi melsec iq-r r32 sfcpu firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-33324 is a high vulnerability (CVSS 7.5) in Mitsubishi Electric Corporation Melipc Series Mi5122-vw, published December 23, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. No source names a fixed version.