Read the docs
TI-2025-04954 Aliases CVE-2025-5514GHSA-hqhx-rf6h-xj5g

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

Priority LOW 31CWE-130Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0059 48th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ES1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ESS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DSS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/ES1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/DS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ES1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ESS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DSS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/ES1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/DS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/ES1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/ESS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DSS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/ES1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/DS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/D1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/D1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/DSS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/D1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/DSS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DS-TS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSS-TS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MR/DS-TS1.060 and later—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/ES-AAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MT/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MT/ESSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MR/ESAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-30MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-40MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-60MR/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MT/DSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MT/DSSAll versions—No fix listedCNA
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5S-80MR/DSAll versions—No fix listedCNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-5514
  2. 2026-10-03 Alias added: GHSA-hqhx-rf6h-xj5g

References

  • TI-2022-14737 Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64 CVSS 3.1CRITICAL 9.8
  • TI-2022-19113 Authentication Bypass Vulnerability in Web Server Function on MELSEC Series CVSS 3.1CRITICAL 9.1
  • TI-2023-01345 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module CVSS 3.1CRITICAL 10.0
  • TI-2023-06346 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CVSS 3.1CRITICAL 9.8
  • TI-2023-03131 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series CVSS 3.1CRITICAL 9.8
  • TI-2021-03821 Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool CVSS 3.1CRITICAL 9.8
See all 151 →

Sources