7.3
Élevée
CVE-2025-7405 Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU…
Description
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not have authentication features.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MELSEC iQ-F Series FX5U-32MT/ES | Versions non publiées | |
| MELSEC iQ-F Series FX5U-32MT/DS | Versions non publiées | |
| MELSEC iQ-F Series FX5U-32MT/ESS | Versions non publiées | |
| MELSEC iQ-F Series FX5U-32MT/DSS | Versions non publiées | |
| MELSEC iQ-F Series FX5U-32MR/ES | Versions non publiées | |
| MELSEC iQ-F Series FX5U-32MR/DS | Versions non publiées | |
| MELSEC iQ-F Series FX5U-64MT/ES | Versions non publiées | |
| MELSEC iQ-F Series FX5U-64MT/DS | Versions non publiées | |
| MELSEC iQ-F Series FX5U-64MT/ESS | Versions non publiées |
Afficher les 66 autres branches Masquer les 66 autres branches
Autres CVE de MELSEC iQ-F Series FX5U-32MT/ES
Les 11 CVE de MELSEC iQ-F Series FX5U-32MT/ES →
CVE-2025-10259
Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric…
5.3
Moyenne
CVE-2025-7731
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…
7.5
Élevée
CVE-2025-5514
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric…
5.3
Moyenne
CVE-2025-5241
Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…
5.3
Moyenne