{"id":"CVE-2022-24946","aliases":["EUVD-2022-29701","GHSA-xwg7-jq5f-xfcj"],"status":"published","title":"Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC-Q Series Q03UDECPU all...","description":"Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions \"16\" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. \"24061\" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. \"24061\" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number \"24051\" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions \"05\" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01751,"percentile":0.78028,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-413","CWE-667"],"published":"2022-06-15T20:18:35Z","modified":"2026-06-17T04:32:50Z","products":[{"vendor":"mitsubishielectric","product":"l02cpu-p_firmware"},{"vendor":"mitsubishielectric","product":"l02cpu_firmware"},{"vendor":"mitsubishielectric","product":"l02scpu-p_firmware"},{"vendor":"mitsubishielectric","product":"l02scpu_firmware"},{"vendor":"mitsubishielectric","product":"l06cpu-p_firmware"},{"vendor":"mitsubishielectric","product":"l06cpu_firmware"},{"vendor":"mitsubishielectric","product":"l26cpu-\\(p\\)bt_firmware"},{"vendor":"mitsubishielectric","product":"l26cpu-bt-cm_firmware"},{"vendor":"mitsubishielectric","product":"l26cpu-bt_firmware"},{"vendor":"mitsubishielectric","product":"l26cpu-p_firmware"},{"vendor":"mitsubishielectric","product":"l26cpu-pbt_firmware"},{"vendor":"mitsubishielectric","product":"l26cpu_firmware"},{"vendor":"mitsubishielectric","product":"q03udecpu_firmware"},{"vendor":"mitsubishielectric","product":"q04udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q04udpvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q04udvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q06ccpu-v_firmware"},{"vendor":"mitsubishielectric","product":"q06phcpu_firmware"},{"vendor":"mitsubishielectric","product":"q06udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q06udpvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q06udvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q100udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q10udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q13udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q13udpvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q13udvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q20udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q26dhccpu-ls_firmware"},{"vendor":"mitsubishielectric","product":"q26udehcpu_firmware"},{"vendor":"mitsubishielectric","product":"q26udpvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q26udvcpu_firmware"},{"vendor":"mitsubishielectric","product":"q50udehcpu_firmware"}],"references":[{"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-007_en.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://jvn.jp/vu/JVNVU90895626/index.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-172-01","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24946"},{"url":"https://jvn.jp/vu/JVNVU#90895626/index.html"},{"url":"https://github.com/advisories/GHSA-xwg7-jq5f-xfcj"}],"sources":{"cve":[{"id":"CVE-2022-24946","description":"Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions \"16\" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. \"24061\" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. \"24061\" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number \"24051\" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions \"05\" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.","status":"published","published":"2022-06-15T20:18:35Z","modified":"2026-06-02T18:59:07.119Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-413"],"updated_at":"2026-11-02T14:34:34.576287Z"}],"euvd":[{"id":"EUVD-2022-29701","description":"Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions \"16\" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. \"24061\" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. \"24061\" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number \"24051\" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions \"05\" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.","status":"published","published":"2022-06-15T20:18:35Z","modified":"2026-06-02T18:59:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:55.651138Z"}],"ghsa":[{"id":"GHSA-xwg7-jq5f-xfcj","title":"Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC-Q Series Q03UDECPU all...","description":"Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC-Q Series Q03UDECPU all versions, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU all versions, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number \"24051\" and prior and Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number \"24051\" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.","status":"published","published":"2022-06-16T00:00:19Z","modified":"2026-06-02T21:30:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-413","CWE-667"],"updated_at":"2026-11-02T15:08:30.158602Z"}],"nvd":[{"id":"CVE-2022-24946","description":"Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions \"16\" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. \"24061\" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. \"24061\" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number \"24051\" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number \"24051\" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions \"05\" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.","status":"published","published":"2022-06-15T21:15:09.333Z","modified":"2026-06-17T04:32:50.157Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-667","CWE-413"],"updated_at":"2026-11-02T14:07:22.232533Z"}]}}