CVE-2025-3755

criticalpriority · track · 0EPSS 0.009 · 58 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.86% (58th) EPSS

CVSS 9.1 · critical

Is it mine?

271 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No vendor fix yet; a mitigation is available.

MitigationFX5S-30MR/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-30MR/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-30MR/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-30MR/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-30MT/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-30MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-30MT/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-30MT/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-40MR/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-40MR/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-40MR/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-40MR/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-40MT/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-40MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-40MT/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-40MT/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-60MR/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-60MR/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-60MR/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-60MR/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-60MT/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-60MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-60MT/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-60MT/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-80MR/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-80MR/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-80MR/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-80MR/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-80MT/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-80MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-80MT/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5S-80MT/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-32MR/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-32MR/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-32MR/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-32MR/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-32MT/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-32MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-32MT/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-32MT/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-64MR/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-64MR/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-64MR/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-64MR/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-64MT/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-64MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-64MT/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-64MT/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-80MR/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-80MR/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-80MR/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-80MR/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-80MT/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-80MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-80MT/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5U-80MT/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UC-32MR/DS-TScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UC-32MT/Dcisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UC-32MT/DS-TScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UC-32MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UC-32MT/DSS-TScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UC-64MT/Dcisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UC-64MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UC-96MT/Dcisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UC-96MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-24MR/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-24MR/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-24MR/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-24MR/ES-Acisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-24MR/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-24MT/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-24MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-24MT/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-24MT/ES-Acisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-24MT/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-40MR/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-40MR/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-40MR/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-40MR/ES-Acisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-40MR/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-40MT/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-40MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-40MT/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-40MT/ES-Acisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-40MT/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-60MR/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-60MR/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-60MR/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-60MR/ES-Acisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-60MR/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-60MT/DScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-60MT/DSScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-60MT/EScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-60MT/ES-Acisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:
MitigationFX5UJ-60MT/ESScisa_csaf_ot
Mitsubishi Electric recommends that customers take the following mitigation measures to minimize the risk of exploiting this vulnerability:

cvss

Technical severity, 0–10. One row per scoring source.

9.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.3–9.1

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · CISA US

v3.19.1criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · ENISA EU

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jpexploitability 3.9 · impact 5.2

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1285USCWE-1285USCWE-1285US

affected products (271)

Products and version ranges known to be affected.

Mitsubishi Electric FX5S-30MR/DS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-30MR/DSS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-30MR/ES: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-30MR/ESS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-30MT/DS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-30MT/DSS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-30MT/ES: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-30MT/ESS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-40MR/DS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-40MR/DSS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-40MR/ES: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-40MR/ESS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-40MT/DS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-40MT/DSS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-40MT/ES: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-40MT/ESS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-60MR/DS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-60MR/DSS: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-60MR/ES: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric FX5S-60MR/ESS: vers:all/*all versionscisa_csaf_otUS

showing 20 of 271

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-25-153-03Mitsubishi Electric MELSEC iQ-F Series2025-06-03icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an attacker to read confidential information, cause a denial-of-service condition, or stop operations by sending specially crafted packets.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

published 2025-05-29modified 2026-06-17

references (10)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan