CVE-2025-7405 | THREATINT

Description

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not have authentication features.

PUBLISHED Reserved 2025-07-10 | Published 2025-09-01 | Updated 2025-09-02 | Assigner Mitsubishi

HIGH: 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Problem types

CWE-306 Missing Authentication for Critical Function

Product status

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

1.060 and later

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

Default status

unaffected

All versions

affected

References

www.mitsubishielectric.com/...nerability/pdf/2025-011_en.pdf vendor-advisory

jvn.jp/vu/JVNVU90041458/ government-resource

www.cisa.gov/news-events/ics-advisories/icsa-25-240-01 government-resource

cve.org (CVE-2025-7405)

nvd.nist.gov (CVE-2025-7405)

Download JSON