Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2022-25158

Quick assessment

Affected

n/a Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU; Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU; Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU; itsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4); Mitsubishi Electric MELSEC iQ-R series RJ71EN71; Mitsubishi Electric MELSEC iQ-R series RJ71GF11-T2; Mitsubishi Electric MELSEC iQ-R series RJ71GP21(S)-SX; Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2; Mitsubishi Electric MELSEC Q series Q03UDECPU; Mitsubishi Electric MELSEC Q series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4); Mitsubishi Electric MELSEC Q series QJ71E71-100; Mitsubishi Electric MELSEC L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC L series L26CPU-(P)BT; Mitsubishi Electric MELSEC L series LJ71C24(-R2); Mitsubishi Electric MELSEC L series LJ71E71-100; Mitsubishi Electric MELSEC L series LJ72GF15-T2

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mitsubishi Electric MELSEC iQ-F series是日本三菱电机（Mitsubishi Electric）公司的一款可编程逻辑控制器。 Mitsubishi Electric MELSEC iQ-F series 多款产品存在安全漏洞，远程攻击者利用该漏洞可泄露或篡改明文中保存密码序列的文件。

CVE-2022-25158 affects n/a Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU; Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU; Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU; Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU; itsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4); Mitsubishi Electric MELSEC iQ-R series RJ71EN71; Mitsubishi Electric MELSEC iQ-R series RJ71GF11-T2; Mitsubishi Electric MELSEC iQ-R series RJ71GP21(S)-SX; Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2; Mitsubishi Electric MELSEC Q series Q03UDECPU; Mitsubishi Electric MELSEC Q series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4); Mitsubishi Electric MELSEC Q series QJ71E71-100; Mitsubishi Electric MELSEC L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC L series L26CPU-(P)BT; Mitsubishi Electric MELSEC L series LJ71C24(-R2); Mitsubishi Electric MELSEC L series LJ71E71-100; Mitsubishi Electric MELSEC L series LJ72GF15-T2. No confirmed in-the-wild exploitation; assess based on exposure. Mitsubishi Electric MELSEC iQ-F series是日本三菱电机（Mitsubishi Electric）公司的一款可编程逻辑控制器。 Mitsubishi Electric MELSEC iQ-F series 多款产品存在安全漏洞，远程攻击者利用该漏洞可泄露或篡改明文中保存密码序列的文件。

AI Predicted 4.3 Difficulty: Moderate EPSS 1.37% · P71 Updated Feb 25, 2026

Possible ATT&CK Techniques 2 AI

T1552 · Unsecured Credentials T1005 · Data from Local System

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-25158

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions, Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions, Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions, Mitsubishi Electric MELSEC iQ-R series RJ71GF11-T2 all versions, Mitsubishi Electric MELSEC iQ-R series RJ71GP21(S)-SX all versions, Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions, Mitsubishi Electric MELSEC Q series Q03UDECPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/10/13/20/26/50/100UDEHCPU all versions, Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions, Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions, Mitsubishi Electric MELSEC L series L02/06/26CPU(-P) all versions, Mitsubishi Electric MELSEC L series L26CPU-(P)BT all versions, Mitsubishi Electric MELSEC L series LJ71C24(-R2) all versions, Mitsubishi Electric MELSEC L series LJ71E71-100 all versions and Mitsubishi Electric MELSEC L series LJ72GF15-T2 all versions allows a remote attacker to disclose or tamper with a file in which password hash is saved in cleartext.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Mitsubishi Electric MELSEC iQ-F series 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU; Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU; Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU; Mitsubishi Electric MELSEC iQ-R seri	Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions	-

II. Public POCs for CVE-2022-25158

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2022-25158

请登录查看更多情报信息。

Vendor Advisories for CVE-2022-25158 (2)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-04 x_refsource_MISC
🔗 JVNVU#96577897: 三菱電機製FA製品における複数の脆弱性 Read full article x_refsource_MISC

Other References for CVE-2022-25158 (1)

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-031_en.pdf x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2022-25158

Same Patch Batch · n/a · 2022-04-01 · 32 CVEs total

CVE-2022-25017	9.1 CRITICAL	Hitron Technologies CHITA Router Firmware 操作系统命令注入漏洞
CVE-2022-21235	8.1 HIGH	Command Injection
CVE-2022-24440	8.1 HIGH	Command Injection
CVE-2022-21223	8.1 HIGH	Command Injection
CVE-2022-24066	8.1 HIGH	Command Injection
CVE-2022-22965		Spring Framework 代码注入漏洞
CVE-2021-20238		Red Hat OpenShift Container Platform 访问控制错误漏洞
CVE-2022-22950		Vmware Spring Framework 安全漏洞
CVE-2021-32503		SICK FieldEcho 资源管理错误漏洞
CVE-2021-3461		Red Hat Keycloak代码问题漏洞
CVE-2021-20295		Red Hat Enterprise Linux 缓冲区错误漏洞
CVE-2021-27223		Kaspersky Anti-Virus安全漏洞
CVE-2022-27534		Kaspersky Anti-Virus 安全漏洞
CVE-2022-25155		Mitsubishi Electric MELSEC iQ-F series 授权问题漏洞
CVE-2022-25156		Mitsubishi Electric MELSEC iQ-F series 加密问题漏洞
CVE-2022-25157		Mitsubishi Electric MELSEC iQ-F series 授权问题漏洞
CVE-2022-25159		Mitsubishi Electric MELSEC iQ-F series 安全漏洞
CVE-2022-25160		Mitsubishi Electric Factory Automation 安全漏洞
CVE-2021-3847		Linux kernel 安全漏洞
CVE-2019-14839		Business-central 信息泄露漏洞

Showing top 20 of 32 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: n/a

V. Comments for CVE-2022-25158

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2022-25158

Quick assessment

Possible ATT&CK Techniques 2 AI

I. Basic Information for CVE-2022-25158

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2022-25158

III. Intelligence Information for CVE-2022-25158

Vendor Advisories for CVE-2022-25158 (2)

Other References for CVE-2022-25158 (1)

Same Patch Batch · n/a · 2022-04-01 · 32 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2022-25158

Leave a comment