5.3
Medium
CVE-2025-5514 Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric…
Description
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MELSEC iQ-F Series FX5U-32MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/DSS | Versions not published | |
| MELSEC iQ-F Series FX5U-32MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-32MR/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/ESS | Versions not published |
Show the 66 other branches Hide the 66 other branches
Other CVEs of MELSEC iQ-F Series FX5U-32MT/ES
The 11 CVEs of MELSEC iQ-F Series FX5U-32MT/ES →
CVE-2025-10259
Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric…
5.3
Medium
CVE-2025-7731
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…
7.5
High
CVE-2025-7405
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU…
7.3
High
CVE-2025-5241
Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…
5.3
Medium