CVE-2025-3755

Description

Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-003_en.pdf ↗
• https://jvn.jp/vu/JVNVU94070048/ ↗
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-153-03 ↗