CVE-2025-7405highCWE-306

CVE-2025-7405: high-severity vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F…

Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module

Published 01 Sep 2025 · Updated 02 Sep 2025

Follow this CVE + Monitor MELSEC iQ-F Series FX5UC-32MR/DS-TS + Monitor MELSEC iQ-F Series FX5UC-32MT/DSS-TS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.3epss 0.5%

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not have authentication features.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MR/DS-TS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/D Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DSS-TS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DS-TS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-64MT/D Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-64MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-96MT/D Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-96MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ESS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/DS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/DSS Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ES Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ES-A Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ESS

Related CVEs — Mitsubishi Electric Corporation MELSEC iQ-F…

In the same product, most dangerous first.

CVE-2023-4625MEDIUMDenial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU moduleEPSS 1.3%CVE-2022-40267MEDIUMAuthentication Bypass Vulnerability in Web Server Function on MELSEC SeriesEPSS 1.2%CVE-2023-0457HIGHInformation Disclosure Vulnerability in MELSEC SeriesEPSS 1.2%CVE-2023-4699CRITICALArbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA productsEPSS 1.1%CVE-2025-3755CRITICALInformation Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU moduleEPSS 0.9%CVE-2025-5514MEDIUMDenial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU moduleEPSS 0.6%

References

https://jvn.jp/vu/JVNVU90041458/https://www.cisa.gov/news-events/ics-advisories/icsa-25-240-01 https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-011_en.pdf