Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2022-24946

Quick assessment

Affected

n/a Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q Series Q03UDECPU; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G); Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC-L series L26CPU-(P)BT; Mitsubishi Electric MELIPC Series MI5122-VW

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mitsubishi Electric MELSEC-Q Series是日本三菱电机（Mitsubishi Electric）公司的一款MELSEC-Q系列的可编程逻辑控制器。 Mitsubishi Electric 存在安全漏洞，该漏洞源于不正确的资源锁定（未能释放资源）导致的拒绝服务 (DoS) ，以下产品和版本受到影响：Mitsubishi Electri MELSEC-Q 系列 Q04/06/10/13/20/26/50/100UDEHCPU 所有版本，Mitsubishi Electri MEL

AI Predicted 7.5 Difficulty: Moderate EPSS 1.60% · P74 Updated Jun 03, 2026

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 11

Vendor	Product	Version Range	Status
n/a	Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q Series Q03UDECPU; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC-Q Seri	`Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior`	affected
		`Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior`	affected
		`Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No`	affected
		`Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051`	affected
		`Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051"`	affected
		`Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions`	affected
		`Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions`	affected
		`Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions`	affected
… +3 more rows

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-24946

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Mitsubishi Electric MELSEC-Q Series 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q Series Q03UDECPU; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC-Q	Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior	-

II. Public POCs for CVE-2022-24946

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2022-24946

请登录查看更多情报信息。

Vendor Advisories for CVE-2022-24946 (2)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-172-01 x_refsource_MISC
https://jvn.jp/vu/JVNVU90895626/index.html x_refsource_MISC

Other References for CVE-2022-24946 (1)

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-007_en.pdf x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2022-24946

Same Patch Batch · n/a · 2022-06-15 · 123 CVEs total

CVE-2022-1958	6.3 MEDIUM	FileCloud NTFS access control
CVE-2022-20206		Google Android 信息泄露漏洞
CVE-2017-20049		AXIS Network cameras 安全漏洞
CVE-2021-40940		Monstra CMS 代码问题漏洞
CVE-2022-32992		Online Tours And Travels Management System SQL注入漏洞
CVE-2022-32991		Web Based Quiz System SQL注入漏洞
CVE-2022-32302		Theme Park Ticketing System SQL注入漏洞
CVE-2022-32301		YouDianCMS SQL注入漏洞
CVE-2022-32300		YouDianCMS SQL注入漏洞
CVE-2022-32299		YouDianCMS SQL注入漏洞
CVE-2022-32101		kkcms SQL注入漏洞
CVE-2021-40910		PHPCMS 跨站脚本漏洞
CVE-2021-41672		PEEL Shopping CMS SQL注入漏洞
CVE-2022-20233		Google Android 缓冲区错误漏洞
CVE-2022-20209		Google Android 缓冲区错误漏洞
CVE-2022-20208		Google Android 缓冲区错误漏洞
CVE-2022-20207		Google Android 安全漏洞
CVE-2022-20195		Google Android 代码问题漏洞
CVE-2022-20194		Google Android 安全漏洞
CVE-2022-20193		Google Android 安全漏洞

Showing top 20 of 123 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: n/a

V. Comments for CVE-2022-24946

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2022-24946

Quick assessment

Possible ATT&CK Techniques 1 AI

Affected Version Matrix 11

I. Basic Information for CVE-2022-24946

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2022-24946

III. Intelligence Information for CVE-2022-24946

Vendor Advisories for CVE-2022-24946 (2)

Other References for CVE-2022-24946 (1)

Same Patch Batch · n/a · 2022-06-15 · 123 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2022-24946

Leave a comment