CVE-2025-10259

Description

Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote attacker to disconnect the connection by sending specially crafted TCP packets to cause a denial-of-service (DoS) condition on the products. There is no impact on connections other than the attacked one.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-014_en.pdf ↗
• https://jvn.jp/vu/JVNVU92088475/ ↗
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-01 ↗