Home
Description
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information.
PUBLISHED Reserved 2025-07-16 | Published 2025-09-01 | Updated 2025-09-02 | Assigner Mitsubishi
HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Problem types
CWE-319 Cleartext Transmission of Sensitive Information
Product status
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
Default status
unaffected
All versions
affected
References
www.mitsubishielectric.com/...nerability/pdf/2025-012_en.pdf vendor-advisory
jvn.jp/vu/JVNVU90041458/ government-resource
www.cisa.gov/news-events/ics-advisories/icsa-25-240-02 government-resource
cve.org
(CVE-2025-7731)
nvd.nist.gov
(CVE-2025-7731)
Download JSON
