SARA / Free Tools / CVE / CVE-2022-33324

CVE-2022-33324 — Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corpo

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior

CVSS
7.5 HIGH
EPSS
1.47% (top 19.30%)
CWE
CWE-404
Published
2022-12-23T02:24:15.274Z
Last modified
2024-09-05T05:25:44.061Z
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

01What is this vulnerability?

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation…

02Affected products

VendorProductVersions
Mitsubishi Electric CorporationMELSEC iQR Series R00CPU — Firmware versions "32" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R01CPU — Firmware versions "32" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R02CPU — Firmware versions "32" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R04CPU — Firmware versions "65" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R08CPU — Firmware versions "65" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R16CPU — Firmware versions "65" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R32CPU — Firmware versions "65" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R120CPU — Firmware versions "65" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R04ENCPU — Firmware versions "65" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R08ENCPU — Firmware versions "65" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R16ENCPU — Firmware versions "65" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R32ENCPU — Firmware versions "65" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R120ENCPU — Firmware versions "65" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R08SFCPU — Firmware versions "29" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R16SFCPU — Firmware versions "29" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R32SFCPU — Firmware versions "29" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R120SFCPU — Firmware versions "29" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R12CCPU-V — Firmware versions "17" and prior
Mitsubishi Electric CorporationMELSEC iQL Series L04HCPU — Firmware versions "05" and prior
Mitsubishi Electric CorporationMELSEC iQL Series L08HCPU — Firmware versions "05" and prior
Mitsubishi Electric CorporationMELSEC iQL Series L16HCPU — Firmware versions "05" and prior
Mitsubishi Electric CorporationMELSEC iQL Series L32HCPU — Firmware versions "05" and prior
Mitsubishi Electric CorporationMELIPC Series MI5122VW — Firmware versions "07" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R08PSFCPU — Firmware versions "08" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R16PSFCPU — Firmware versions "08" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R32PSFCPU — Firmware versions "08" and prior
Mitsubishi Electric CorporationMELSEC iQR Series R120PSFCPU — Firmware versions "08" and prior

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →