CVE-2022-25163: Mitsubishi Melsec Iq-R RD81MES96N Firmware

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial number "24061" or prior, Mitsubishi Electric MELSEC-L series LJ71E71-100 first 5 digits of serial number "24061" or prior and Mitsubishi Electric MELSEC iQ-R Series RD81MES96N firmware version "08" or prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on the target products by sending specially crafted packets.

Affected products

• Mitsubishi Melsec Iq-R RD81MES96N Firmware: before 09 (fixed in 09)
• Mitsubishi Melsec LJ71E71-100 Firmware: before 24062 (fixed in 24062)
• Mitsubishi Melsec QJ71E71-100 Firmware: before 24062 (fixed in 24062)

Published 2022-06-02. Last modified 2026-06-17.