CVE-2025-15080: Mitsubishi Electric Corporation MELSEC iQ-R Series

Описание

Оригинално описание

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric MELSEC iQ-R Series R08PCPU, R16PCPU, R32PCPU, and R120PCPU allows an unauthenticated attacker to read device data or part of a control program from the affected product, write device data in the affected product, or cause a denial of service (DoS) condition on the affected product by sending a specially crafted packet containing a specific command to the affected product.

Засегнати продукти

• Mitsubishi Electric Corporation MELSEC iQ-R Series R08PCPU: Firmware versions "48" and prior
• Mitsubishi Electric Corporation MELSEC iQ-R Series R16PCPU: Firmware versions "48" and prior
• Mitsubishi Electric Corporation MELSEC iQ-R Series R32PCPU: Firmware versions "48" and prior
• Mitsubishi Electric Corporation MELSEC iQ-R Series R120PCPU: Firmware versions "48" and prior

Вид слабост

• CWE-1284 Improper Validation of Specified Quantity in Input

История

Други уязвимости в Mitsubishi Electric Corporation MELSEC iQ-R Series R08PCPU

• 10.0CVE-2023-4699
• 5.3CVE-2023-4625
• 10.0CVE-2023-1424
• 7.5CVE-2023-0457
• 7.5CVE-2021-20611

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-15080
• https://nvd.nist.gov/vuln/detail/CVE-2025-15080
• https://jvn.jp/vu/JVNVU95093080/
• https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-020_en.pdf
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-036-02