Malicious Code Execution Vulnerability in Mitsubishi Electric Lighting Control Application
CVE-2025-10089
7HIGH
Key Information:
- Status
- Vendor
- CVE Published:
- 18 November 2025
What is CVE-2025-10089?
A vulnerability exists in the MILCO.S Setting Application and related products that can allow a local attacker to execute malicious code. This issue arises when the installer loads a malicious DLL, posing a significant risk if the application is not securely installed. Notably, if the program is directly downloaded from Mitsubishi Electric's official website, and the application shows a valid digital signature from the vendor, it mitigates the risk. This vulnerability is active only during the installation phase and does not affect the application's execution post-installation.
Affected Version(s)
MILCO.S Easy Setting Application (IR) All versions
MILCO.S Easy Switch Application (IR) All versions
MILCO.S Setting Application All versions