9.1
Critique
CVE-2025-3755 Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation…
Description
Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MELSEC iQ-F Series FX5U-32MT/ES | Versions non publiées | |
| MELSEC iQ-F Series FX5U-32MT/DS | Versions non publiées | |
| MELSEC iQ-F Series FX5U-32MT/ESS | Versions non publiées | |
| MELSEC iQ-F Series FX5U-32MT/DSS | Versions non publiées | |
| MELSEC iQ-F Series FX5U-32MR/ES | Versions non publiées | |
| MELSEC iQ-F Series FX5U-32MR/DS | Versions non publiées | |
| MELSEC iQ-F Series FX5U-64MT/ES | Versions non publiées | |
| MELSEC iQ-F Series FX5U-64MT/DS | Versions non publiées | |
| MELSEC iQ-F Series FX5U-64MT/ESS | Versions non publiées |
Afficher les 66 autres branches Masquer les 66 autres branches
Autres CVE de MELSEC iQ-F Series FX5U-32MT/ES
Les 11 CVE de MELSEC iQ-F Series FX5U-32MT/ES →
CVE-2025-10259
Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric…
5.3
Moyenne
CVE-2025-7731
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…
7.5
Élevée
CVE-2025-7405
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU…
7.3
Élevée
CVE-2025-5514
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric…
5.3
Moyenne