5.9
Medium
CVE-2022-40267 Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F…
Description
Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z (x=32,64,96, y=T, z=D,DSS)) with serial number 179**** and prior, and versions 1.074 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/z (x=24,40,60, y=T,R, z=ES,ESS) versions 1.042 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UJ-xMy/ES-A (x=24,40,60, y=T,R) versions 1.043 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5S-xMy/z (x=30,40,60,80, y=T,R, z=ES,ESS) versions 1.003 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU versions 33 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU versions 66 and prior allows a remote unauthenticated attacker to access the Web server function by guessing the random numbers used for authentication from several used random numbers.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MELSEC iQ-F Series FX5U-32MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/ES | Versions not published | |
| MELSEC iQ-F Seres FX5U-80MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-32MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-64MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-80MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-80MT/DS | Versions not published |
Show the 111 other branches Hide the 111 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| MELSEC iQ-F Series FX5U-32MR/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-64MR/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-80MR/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5U-80MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/DSS | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/DSS | Versions not published | |
| MELSEC iQ-F Series FX5U-80MT/DSS | Versions not published | |
| MELSEC iQ-F Series FX5UC-32MT/D | Versions not published | |
| MELSEC iQ-F Series FX5UC-64MT/D | Versions not published | |
| MELSEC iQ-F Series FX5UC-96MT/D | Versions not published | |
| MELSEC iQ-F Series FX5UC-32MT/DSS | Versions not published | |
| MELSEC iQ-F Series FX5UC-64MT/DSS | Versions not published | |
| MELSEC iQ-F Series FX5UC-96MT/DSS | Versions not published | |
| MELSEC iQ-F Series FX5UC-32MT/DS-TS | Versions not published | |
| MELSEC iQ-F Series FX5UC-32MT/DSS-TS | Versions not published | |
| MELSEC iQ-F Series FX5UC-32MR/DS-TS | Versions not published | |
| MELSEC iQ-R Series R00CPU | Versions not published | |
| MELSEC iQ-R Series R01CPU | Versions not published | |
| MELSEC iQ-R Series R02CPU | Versions not published | |
| MELSEC iQ-R Series R04CPU | Versions not published | |
| MELSEC iQ-R Series R08CPU | Versions not published | |
| MELSEC iQ-R Series R16CPU | Versions not published | |
| MELSEC iQ-R Series R32CPU | Versions not published | |
| MELSEC iQ-R Series R120CPU | Versions not published | |
| MELSEC iQ-R Series R04ENCPU | Versions not published | |
| MELSEC iQ-R Series R08ENCPU | Versions not published | |
| MELSEC iQ-R Series R16ENCPU | Versions not published | |
| MELSEC iQ-R Series R32ENCPU | Versions not published | |
| MELSEC iQ-R Series R120ENCPU | Versions not published | |
| MELSEC iQ-F Series FX5UJ-24MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5UJ-40MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5UJ-60MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5UJ-24MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5UJ-40MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5UJ-60MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5UJ-24MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5UJ-40MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5UJ-60MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5UJ-24MT/ES-A | Versions not published | |
| MELSEC iQ-F Series FX5UJ-40MT/ES-A | Versions not published | |
| MELSEC iQ-F Series FX5UJ-60MT/ES-A | Versions not published | |
| MELSEC iQ-F Series FX5UJ-24MR/ES-A | Versions not published | |
| MELSEC iQ-F Series FX5UJ-40MR/ES-A | Versions not published | |
| MELSEC iQ-F Series FX5UJ-60MR/ES-A | Versions not published | |
| MELSEC iQ-F Series FX5S-30MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5S-40MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5S-60MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5S-80MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5S-30MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5S-40MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5S-60MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5S-80MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5S-30MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5S-40MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5S-60MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5S-80MT/ESS | Versions not published | |
| fx5u-80mt\/ess_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5u-32mt\/dss_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5u-64mt\/dss_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5u-80mt\/dss_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uc-32mt\/d_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uc-64mt\/d_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uc-96mt\/d_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uc-32mt\/dss_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uc-64mt\/dss_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uc-96mt\/dss_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uc-32mt\/ds-ts_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uc-32mt\/dss-ts_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uc-32mr\/ds-ts_firmware 1.042 | earliest → 1.042 | No fix stated |
| r00cpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r01cpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r02cpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r04cpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r08cpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r16cpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r32cpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r120cpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r04encpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r08encpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r16encpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r32encpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| r120encpu_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-24mt\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-40mt\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-60mt\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-24mr\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-40mr\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-60mr\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-24mt\/ess_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-40mt\/ess_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-60mt\/ess_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-24mt\/es-a_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-40mt\/es-a_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-60mt\/es-a_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-24mr\/es-a_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-40mr\/es-a_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5uj-60mr\/es-a_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-30mt\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-40mt\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-60mt\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-80mt\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-30mr\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-40mr\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-60mr\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-80mr\/es_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-30mt\/ess_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-40mt\/ess_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-60mt\/ess_firmware 1.042 | earliest → 1.042 | No fix stated |
| fx5s-80mt\/ess_firmware 1.042 | earliest → 1.042 | No fix stated |
Other CVEs of MELSEC iQ-F Series FX5U-32MT/ES
The 11 CVEs of MELSEC iQ-F Series FX5U-32MT/ES →
CVE-2025-10259
Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric…
5.3
Medium
CVE-2025-7731
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…
7.5
High
CVE-2025-7405
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU…
7.3
High
CVE-2025-5514
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric…
5.3
Medium