Read the docs
TI-2025-03307 Aliases CVE-2025-3755GHSA-7r2m-8qrj-39h4

Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module

Priority MEDIUM 49CWE-1285Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00862 58th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/DAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/DAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DS-TSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSS-TSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MR/DS-TSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MR/DSAll versions—No fix listedCNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-3755
  2. 2026-10-03 Alias added: GHSA-7r2m-8qrj-39h4

References

  • TI-2022-14737 Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64 CVSS 3.1CRITICAL 9.8
  • TI-2022-19113 Authentication Bypass Vulnerability in Web Server Function on MELSEC Series CVSS 3.1CRITICAL 9.1
  • TI-2023-01345 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module CVSS 3.1CRITICAL 10.0
  • TI-2023-06346 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CVSS 3.1CRITICAL 9.8
  • TI-2023-03131 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series CVSS 3.1CRITICAL 9.8
  • TI-2021-03821 Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool CVSS 3.1CRITICAL 9.8
See all 151 →

Sources