Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-3128

Mitsubishi Electric Europe smartRTU OS Command Injection

Description

A remote unauthenticated attacker who has bypassed authentication could execute arbitrary OS commands to disclose, tamper with, destroy or delete information in Mitsubishi Electric smartRTU, or cause a denial-of service condition on the product.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mitsubishi Electric Europe smartRTU

Default version status: unaffected

  • 0 to ≤ 3.37affected

References