{"id":"CVE-2025-3755","aliases":["EUVD-2025-16363","GHSA-7r2m-8qrj-39h4"],"status":"published","title":"Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module","description":"Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00862,"percentile":0.58986,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1285"],"published":"2025-05-29T04:47:52Z","modified":"2026-06-17T09:20:36Z","products":[{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-30mr/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-30mr/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-30mt/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-30mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-30mt/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-30mt/ess"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-40mr/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-40mr/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-40mt/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-40mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-40mt/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-40mt/ess"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-60mr/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-60mr/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-60mt/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-60mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-60mt/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-60mt/ess"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-80mr/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-80mr/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-80mt/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-80mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-80mt/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5s-80mt/ess"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-32mr/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-32mr/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-32mt/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-32mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-32mt/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-32mt/ess"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-64mr/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-64mr/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-64mt/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-64mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-64mt/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-64mt/ess"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-80mr/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-80mr/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-80mt/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-80mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-80mt/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5u-80mt/ess"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uc-32mr/ds-ts"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uc-32mt/d"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uc-32mt/ds-ts"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uc-32mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uc-32mt/dss-ts"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uc-64mt/d"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uc-64mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uc-96mt/d"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uc-96mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-24mr/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-24mr/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-24mr/es-a"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-24mt/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-24mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-24mt/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-24mt/es-a"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-24mt/ess"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-40mr/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-40mr/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-40mr/es-a"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-40mt/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-40mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-40mt/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-40mt/es-a"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-40mt/ess"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-60mr/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-60mr/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-60mr/es-a"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-60mt/ds"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-60mt/dss"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-60mt/es"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-60mt/es-a"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5uj-60mt/ess"}],"references":[{"url":"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-003_en.pdf","tags":["vendor-advisory"]},{"url":"https://jvn.jp/vu/JVNVU94070048/","tags":["government-resource"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-153-03","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3755"},{"url":"https://jvn.jp/vu/JVNVU94070048"},{"url":"https://github.com/advisories/GHSA-7r2m-8qrj-39h4"}],"sources":{"cve":[{"id":"CVE-2025-3755","title":"Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module","description":"Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.","status":"published","published":"2025-05-29T04:47:52.187Z","modified":"2025-08-27T08:02:37.808Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-1285"],"updated_at":"2026-11-02T14:32:39.378527Z"}],"euvd":[{"id":"EUVD-2025-16363","description":"Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.","status":"published","published":"2025-05-29T04:47:52Z","modified":"2025-08-27T08:02:37Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T20:31:52.106571Z"}],"ghsa":[{"id":"GHSA-7r2m-8qrj-39h4","title":"Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi...","description":"Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.","status":"published","published":"2025-05-29T06:31:17Z","modified":"2025-09-08T05:05:59Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-1285"],"updated_at":"2026-11-02T15:03:31.573808Z"}],"nvd":[{"id":"CVE-2025-3755","description":"Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.","status":"published","published":"2025-05-29T05:15:20.93Z","modified":"2026-06-17T09:20:36.64Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-1285"],"updated_at":"2026-11-02T14:11:10.143444Z"}]}}