Melsec Iq F Series Fx5Uj 40Mt/Es
Approved changes feed: RSS · Atom
cpe:2.3:a:mitsubishi_electric_corporation:melsec_iq-f_series_fx5uj-40mt/es:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mitsubishi Electric Corporation (d664dc32-cd69-5fcd-bcda-db4283d1f666) |
|---|---|
| Product | Melsec Iq F Series Fx5Uj 40Mt/Es (2c3897c2-c3bc-5c03-8a05-522566577bc7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-7731 |
vulnerable | 2026-06-08 07:45:18.093552 |
Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module
HIGH (7.5)
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information.
Published: 2025-09-01T03:57:49.657Z
Updated: 2025-09-02T19:28:39.347Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7405 |
vulnerable | 2026-06-08 07:43:18.501661 |
Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module
HIGH (7.3)
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not have authentication features.
Published: 2025-09-01T03:54:47.567Z
Updated: 2025-09-02T19:27:49.951Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5514 |
vulnerable | 2026-06-08 07:37:25.028047 |
Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module
MEDIUM (5.3)
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.
Published: 2025-08-25T05:55:32.622Z
Updated: 2025-08-26T04:19:57.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5241 |
vulnerable | 2026-06-08 07:35:24.495789 |
Denial-of-Service Vulnerability in MELSEC iQ-F Series
MEDIUM (5.3)
Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lockout legitimate users for a certain period by repeatedly attempting to login with incorrect passwords. The legitimate users will be unable to login until a certain period has passed after the lockout or until the product is reset.
Published: 2025-07-11T00:16:43.275Z
Updated: 2025-07-11T13:34:05.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3755 |
vulnerable | 2026-06-08 07:23:09.809398 |
Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module
CRITICAL (9.1)
Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.
Published: 2025-05-29T04:47:52.187Z
Updated: 2025-08-27T08:02:37.808Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10259 |
vulnerable | 2026-06-08 07:02:26.553593 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4699 |
vulnerable | 2026-06-08 06:16:14.222360 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4625 |
vulnerable | 2026-06-08 06:16:13.866588 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0457 |
vulnerable | 2026-06-08 05:52:05.003950 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40267 |
vulnerable | 2026-06-08 05:48:24.507325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.