CVE-2025-5514mediumCWE-130

CVE-2025-5514: medium-severity vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F…

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

Published 25 Aug 2025 · Updated 26 Aug 2025

Follow this CVE + Monitor MELSEC iQ-F Series FX5UC-32MR/DS-TS + Monitor MELSEC iQ-F Series FX5UC-32MT/DSS-TS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.6%

Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MR/DS-TS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/D Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DSS-TS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DS-TS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-64MT/D Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-64MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-96MT/D Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-96MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ESS

Related CVEs — Mitsubishi Electric Corporation MELSEC iQ-F…

In the same product, most dangerous first.

CVE-2023-4625MEDIUMDenial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU moduleEPSS 1.3%CVE-2022-40267MEDIUMAuthentication Bypass Vulnerability in Web Server Function on MELSEC SeriesEPSS 1.2%CVE-2023-0457HIGHInformation Disclosure Vulnerability in MELSEC SeriesEPSS 1.2%CVE-2023-4699CRITICALArbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA productsEPSS 1.1%CVE-2025-3755CRITICALInformation Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU moduleEPSS 0.9%CVE-2025-7405HIGHInformation Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU moduleEPSS 0.5%

References

https://jvn.jp/vu/JVNVU90316328/https://www.cisa.gov/news-events/ics-advisories/icsa-25-233-01 https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-010_en.pdf