PT-2025-23139 · Mitsubishi · Melsec Iq-F Series

Published 2025-05-29 · Updated 2025-08-27 · CVE-2025-3755

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules (affected versions not specified)

Description The issue allows a remote unauthenticated attacker to read information in the product, cause a Denial-of-Service (DoS) condition in MELSOFT connection, or stop the operation of the CPU module, by sending specially crafted packets. The product needs to be reset for recovery.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-1285

Related Identifiers

BDU:2025-16256

CVE-2025-3755

Affected Products

Melsec Iq-F Series

References · 14

• https://mitsubishielectric.com/psirt/vulnerability/pdf/2025-003_en.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-16256 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-3755 · Security Note
• https://t.me/cvenotify/123942 · Telegram Post
• https://twitter.com/CVEnew/status/1927957276960215049 · Twitter Post
• https://twitter.com/cybercronai/status/1928452068441739368 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1927965226353275379 · Twitter Post
• https://t.me/cveNotify/133661 · Telegram Post
• https://jvn.jp/vu/JVNVU94070048 · Note
• https://twitter.com/CveFindCom/status/1927955704200974503 · Twitter Post
• https://t.me/cvetracker/24877 · Telegram Post
• https://t.me/latest_high_impact_cve/2484 · Telegram Post
• https://twitter.com/offseq/status/1927953079543988505 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-153-03 · Note