Filtered by vendor Mitsubishi Electric Subscriptions
Filtered by product Melsec Iq-f Series Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-7731 1 Mitsubishi Electric 1 Melsec Iq-f Series 2025-09-02 7.5 High
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information.
CVE-2025-7405 1 Mitsubishi Electric 1 Melsec Iq-f Series 2025-09-02 7.3 High
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not have authentication features.
CVE-2025-5514 1 Mitsubishi Electric 1 Melsec Iq-f Series 2025-08-26 5.3 Medium
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.