{"id":"CVE-2022-33324","aliases":["EUVD-2022-36367","GHSA-2j9m-jh56-7553"],"status":"published","title":"Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series","description":"Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions \"32\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions \"65\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions \"29\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions \"08\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions \"17\" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions \"05\" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions \"07\" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01812,"percentile":0.78791,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404"],"published":"2022-12-23T02:24:15Z","modified":"2026-06-17T04:49:08Z","products":[{"vendor":"mitsubishi","product":"melipc_mi5122-vw_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-l_l04_hcpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-l_l08_hcpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-l_l16_hcpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-l_l32_hcpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r00_cpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r01_cpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r02_cpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r04_cpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r04_sfcpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r08_cpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r08_sfcpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r120_cpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r120_sfcpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r12_ccpu-v_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r16_cpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r16_sfcpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r32_cpu_firmware"},{"vendor":"mitsubishi","product":"melsec_iq-r_r32_sfcpu_firmware"},{"vendor":"mitsubishi electric corporation","product":"melipc series mi5122-vw"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-l series l04hcpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-l series l08hcpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-l series l16hcpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-l series l32hcpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r00cpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r01cpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r02cpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r04cpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r04encpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r08cpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r08encpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r08psfcpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r08sfcpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r120cpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r120encpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r120psfcpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r120sfcpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r12ccpu-v"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r16cpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r16encpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r16psfcpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r16sfcpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r32cpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r32encpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r32psfcpu"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series r32sfcpu"}],"references":[{"url":"https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-018_en.pdf","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://jvn.jp/vu/JVNVU96883262","tags":["government-resource","x_transferred","Third Party Advisory"]},{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-356-03","tags":["government-resource","x_transferred","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33324"},{"url":"https://github.com/advisories/GHSA-2j9m-jh56-7553"}],"sources":{"cve":[{"id":"CVE-2022-33324","title":"Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series","description":"Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions \"32\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions \"65\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions \"29\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions \"08\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions \"17\" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions \"05\" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions \"07\" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.","status":"published","published":"2022-12-23T02:24:15.274Z","modified":"2024-09-05T05:25:44.061Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:34:40.621895Z"}],"euvd":[{"id":"EUVD-2022-36367","description":"Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions \"32\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions \"65\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions \"29\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions \"08\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions \"17\" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions \"05\" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions \"07\" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.","status":"published","published":"2022-12-23T02:24:15Z","modified":"2024-09-05T05:25:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:56:03.731667Z"}],"ghsa":[{"id":"GHSA-2j9m-jh56-7553","title":"Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ...","description":"Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions \"32\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions \"65\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU all versions, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V all versions, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU all versions and Mitsubishi Electric Corporation MELIPC Series MI5122-VW all versions allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.","status":"published","published":"2022-12-23T03:30:35Z","modified":"2023-01-28T05:01:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:43:34.628173Z"}],"nvd":[{"id":"CVE-2022-33324","description":"Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions \"32\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions \"65\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions \"29\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions \"08\" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions \"17\" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions \"05\" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions \"07\" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.","status":"published","published":"2022-12-23T03:15:08.723Z","modified":"2026-06-17T04:49:08.09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:07:34.388163Z"}]}}