CVE:CVE-2022-25163
CNNVD:CNNVD-202206-396
Mitsubishi Electric MELSEC-Q Series等都是日本三菱电机（Mitsubishi Electric）公司的产品。Mitsubishi Electric MELSEC-Q Series是一款MELSEC-Q系列的可编程逻辑控制器。Mitsubishi Electric MELSEC-L Series是一款MELSEC-L系列的可编程逻辑控制器。Mitsubishi Electric MELSEC iQ-R series是一款可编程逻辑控制器。
Mitsubishi Electric MELSEC-Q、Mitsubishi Electric MELSEC-L、Mitsubishi Electric MELSEC iQ-R存在安全漏洞。远程攻击者利用该漏洞通过发送特制数据包导致拒绝服务 (DoS) 条件或在目标产品上执行恶意代码。
solution:Upgrade mitsubishi melsec_iq-r_rd81mes96n_firmware to a higher version than 09,and avoid the version (,09); Upgrade mitsubishi melsec_qj71e71-100_firmware to a higher version than 24062,and avoid the version (,24062); Upgrade mitsubishi melsec_lj71e71-100_firmware to a higher version than 24062,and avoid the version (,24062)