جزئیات آسیبپذیری
CVE-2025-7731
Mitsubishi Electric MELSEC iQ-F Series FX5S-30MR/DSMitsubishi Electric MELSEC iQ-F Series FX5S-30MR/ESMitsubishi Electric MELSEC iQ-F Series FX5S-30MT/DSMitsubishi Electric MELSEC iQ-F Series FX5S-30MT/DSSMitsubishi Electric MELSEC iQ-F Series FX5S-30MT/ESMitsubishi Electric MELSEC iQ-F Series FX5S-30MT/ESS
Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (Mitsubishi) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-30MR/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-30MR/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-30MT/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-30MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-30MT/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-30MT/ESS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-40MR/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-40MR/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-40MT/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-40MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-40MT/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-40MT/ESS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-60MR/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-60MR/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-60MT/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-60MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-60MT/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-60MT/ESS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-80MR/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-80MR/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-80MT/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-80MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-80MT/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5S-80MT/ESS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-32MR/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-32MR/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-32MT/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-32MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-32MT/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-32MT/ESS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-64MR/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-64MR/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-64MT/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-64MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-64MT/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-64MT/ESS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-80MR/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-80MR/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-80MT/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-80MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-80MT/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5U-80MT/ESS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UC-32MR/DS-TS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UC-32MT/D | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UC-32MT/DS-TS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UC-32MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UC-32MT/DSS-TS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UC-64MT/D | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UC-64MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UC-96MT/D | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UC-96MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-24MR/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-24MR/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-24MR/ES-A | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-24MT/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-24MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-24MT/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-24MT/ES-A | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-24MT/ESS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-40MR/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-40MR/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-40MR/ES-A | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-40MT/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-40MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-40MT/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-40MT/ES-A | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-40MT/ESS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-60MR/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-60MR/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-60MR/ES-A | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-60MT/DS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-60MT/DSS | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-60MT/ES | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-60MT/ES-A | All versions | CVEProject cvelistV5 (CNA) |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5UJ-60MT/ESS | All versions | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳- https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-012_en.pdf vendor-advisory
- https://jvn.jp/vu/JVNVU90041458/ government-resource
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-240-02 government-resource
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیبپذیریهای تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۶/۱۰
- آخرین بهروزرسانی
- ۱۴۰۴/۰۶/۱۱
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Mitsubishi
پیشبینی بهرهبرداری (EPSS)
۰٫۳۴٪
احتمال بهرهبرداری در ۳۰ روز
۲۸٫۵٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- جزئی
ضعفها (CWE)
- CWE-319Cleartext Transmission of Sensitive Information