Approved changes feed: RSS · Atom

cpe:2.3:a:mitsubishi_electric_corporation:melsec_iq-f_series_fx5s-80mt/es:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMitsubishi Electric Corporation (d664dc32-cd69-5fcd-bcda-db4283d1f666)
ProductMelsec Iq F Series Fx5S 80Mt/Es (cea2d799-4ac0-54a2-b1a1-a1493b643588)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7731 vulnerable 2026-06-08 07:45:18.115298 Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module
HIGH (7.5)
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information.
Published: 2025-09-01T03:57:49.657Z
Updated: 2025-09-02T19:28:39.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7405 vulnerable 2026-06-08 07:43:18.522636 Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module
HIGH (7.3)
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not have authentication features.
Published: 2025-09-01T03:54:47.567Z
Updated: 2025-09-02T19:27:49.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5514 vulnerable 2026-06-08 07:37:25.055275 Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module
MEDIUM (5.3)
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.
Published: 2025-08-25T05:55:32.622Z
Updated: 2025-08-26T04:19:57.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5241 vulnerable 2026-06-08 07:35:24.514587 Denial-of-Service Vulnerability in MELSEC iQ-F Series
MEDIUM (5.3)
Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lockout legitimate users for a certain period by repeatedly attempting to login with incorrect passwords. The legitimate users will be unable to login until a certain period has passed after the lockout or until the product is reset.
Published: 2025-07-11T00:16:43.275Z
Updated: 2025-07-11T13:34:05.817Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3755 vulnerable 2026-06-08 07:23:09.828773 Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module
CRITICAL (9.1)
Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.
Published: 2025-05-29T04:47:52.187Z
Updated: 2025-08-27T08:02:37.808Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10259 vulnerable 2026-06-08 07:02:26.578917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4699 vulnerable 2026-06-08 06:16:14.229233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4625 vulnerable 2026-06-08 06:16:13.885267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0457 vulnerable 2026-06-08 05:52:05.014915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40267 vulnerable 2026-06-08 05:48:24.518513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.