Cyber Resilience

CVE-2022-25159

High

Published: 01 April 2022

Published
01 April 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0046 64.6th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-25159 is a high-severity Authentication Bypass by Capture-replay (CWE-294) vulnerability in Mitsubishielectric Fx5Uc Firmware. Its CVSS base score is 8.1 (High).

Operationally, ranked in the top 35.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120(EN)CPU all versions,…

more

Mitsubishi Electric MELSEC iQ-R series R08/16/32/120SFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PCPU all versions, Mitsubishi Electric MELSEC iQ-R series R08/16/32/120PSFCPU all versions, Mitsubishi Electric MELSEC iQ-R series R16/32/64MTCPU all versions, Mitsubishi Electric MELSEC iQ-R series RJ71C24(-R2/R4) all versions, Mitsubishi Electric MELSEC iQ-R series RJ71EN71 all versions, Mitsubishi Electric MELSEC iQ-R series RJ72GF15-T2 all versions, Mitsubishi Electric MELSEC Q series Q03/04/06/13/26UDVCPU all versions, Mitsubishi Electric MELSEC Q series Q04/06/13/26UDPVCPU all versions, Mitsubishi Electric MELSEC Q series QJ71C24N(-R2/R4) all versions and Mitsubishi Electric MELSEC Q series QJ71E71-100 all versions allows a remote unauthenticated attacker to login to the product by replay attack.

CWE(s)
CWE-294

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

mitsubishielectric
fx5uc firmware
all versions
mitsubishielectric
fx5uc-32mr\/ds-ts firmware
all versions
mitsubishielectric
fx5uc-32mt\/d firmware
all versions
mitsubishielectric
fx5uc-32mt\/dss firmware
all versions
mitsubishielectric
fx5uj-24mr\/es firmware
all versions
mitsubishielectric
fx5uj-24mt\/es firmware
all versions
mitsubishielectric
fx5uj-24mt\/ess firmware
all versions
mitsubishielectric
fx5uj-40mr\/es firmware
all versions
mitsubishielectric
fx5uj-40mt\/es firmware
all versions
mitsubishielectric
fx5uj-40mt\/ess firmware
all versions
+6 more product configuration(s) — see NVD for full list

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

AC-9 Previous Logon Notification
addresses: CWE-294

Allows detection of capture-replay attacks by showing the replayed logon's timestamp as the last logon.

SC-23 Session Authenticity
addresses: CWE-294

Protects against replay of captured session tokens or credentials by requiring authenticated, fresh session channels.

SC-40 Wireless Link Protection
addresses: CWE-294

Wireless link protections commonly incorporate replay protection, reducing the exploitability of capture-replay weaknesses.

SC-45 System Time Synchronization
addresses: CWE-294

Accurate synchronized time enables tight timestamp windows that directly limit capture-replay windows in authentication protocols.

References