CVE-2022-25158

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F…

published April 1, 2022

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

🚨 This vulnerability lets attackers peek at password hashes stored in cleartext across multiple Mitsubishi Electric MELSEC series! 😱 Think of this like a restaurant where the safe with the secret recipe has no lock; anyone can just walk in and grab the recipe without a second thought. A remote attacker can access sensitive information without breaking in—it's all laid out for them! If exploited, an attacker could easily disclose or even tamper with sensitive files, putting critical systems at risk. Imagine the chaos of someone altering the ingredients of a secret recipe—your security integrity could be in jeopardy!

Put simply

Think of this like a restaurant where the safe with the secret recipe has no lock; anyone can just walk in and grab the recipe without a second thought. A remote attacker can access sensitive information without breaking in—it's all laid out for them! This vulnerability results from the cleartext storage of password hashes in various Mitsubishi Electric MELSEC CPUs, allowing unauthorized access to sensitive credential data.

What to do

If exploited, an attacker could easily disclose or even tamper with sensitive files, putting critical systems at risk. Imagine the chaos of someone altering the ingredients of a secret recipe—your security integrity could be in jeopardy! To protect against this vulnerability, ensure that you update your systems to the latest firmware as soon as possible. Additionally, implement measures like encrypting sensitive information and conducting regular security audits. You’ve got this! Follow these steps, and you’ll help keep the digital kitchen safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01371 · 71.7th percentile
Published
2022-04-01T22:18Z
EPSS history
Timeline
  • 01 APR 22:18Z
    Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F…
    cvelistv5