Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-25160

EPSS 0.35% · P58
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-25160

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R16/32/64MTCPU all versions, Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions, Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions, Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions, Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions and Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions allows a remote unauthenticated attacker to disclose a file in a legitimate user's product by using previously eavesdropped cleartext information and to counterfeit a legitimate user’s system.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mitsubishi Electric Factory Automation 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mitsubishi Electric Factory Automation是日本三菱电机（Mitsubishi Electric）公司的工业自动化产品。 Mitsubishi Electric Factory Automation 存在安全漏洞，未经身份验证的远程攻击者利用该漏洞使用先前窃听的明文信息，泄露合法用户产品中的文件，并伪造合法用户的系统。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU; Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU; Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU; Mitsubishi Electric MELSEC iQ-R seri Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions -

II. Public POCs for CVE-2022-25160

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-25160

请登录查看更多情报信息。

Same Patch Batch · n/a · 2022-04-01 · 32 CVEs total

CVE-2022-250179.1 CRITICALHitron Technologies CHITA Router Firmware 操作系统命令注入漏洞
CVE-2022-212358.1 HIGHCommand Injection
CVE-2022-244408.1 HIGHCommand Injection
CVE-2022-212238.1 HIGHCommand Injection
CVE-2022-240668.1 HIGHCommand Injection
CVE-2022-22965Spring Framework 代码注入漏洞
CVE-2021-20238Red Hat OpenShift Container Platform 访问控制错误漏洞
CVE-2022-22950Vmware Spring Framework 安全漏洞
CVE-2021-32503SICK FieldEcho 资源管理错误漏洞
CVE-2021-3461Red Hat Keycloak代码问题漏洞
CVE-2021-20295Red Hat Enterprise Linux 缓冲区错误漏洞
CVE-2021-27223Kaspersky Anti-Virus安全漏洞
CVE-2022-27534Kaspersky Anti-Virus 安全漏洞
CVE-2022-25155Mitsubishi Electric MELSEC iQ-F series 授权问题漏洞
CVE-2022-25156Mitsubishi Electric MELSEC iQ-F series 加密问题漏洞
CVE-2022-25157Mitsubishi Electric MELSEC iQ-F series 授权问题漏洞
CVE-2022-25159Mitsubishi Electric MELSEC iQ-F series 安全漏洞
CVE-2022-25158Mitsubishi Electric MELSEC iQ-F series 安全漏洞
CVE-2021-3847Linux kernel 安全漏洞
CVE-2019-14839Business-central 信息泄露漏洞

Showing top 20 of 32 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU; Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU; Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU; Mitsubishi Electric MELSEC iQ-R series R16/32/64MTCPU; Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4); Mitsubishi Electric MELSEC iQ-R series RJ71EN71; Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2; Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4); Mitsubishi Electric MELSEC Q series QJ71E71-100
Same vendor: n/a

V. Comments for CVE-2022-25160

No comments yet

Leave a comment