Incorrect Default Permissions in Mitsubishi Electric FREQSHIP-mini for Windows
CVE-2025-10314
8.8HIGH
Key Information:
- Vendor
- CVE Published:
- 5 February 2026
What is CVE-2025-10314?
A vulnerability exists in Mitsubishi Electric's FREQSHIP-mini for Windows, where incorrect default permissions allow a local attacker to execute arbitrary code with system privileges. This can be accomplished by replacing executable files (EXE) or dynamic link libraries (DLLs) within the installation directory using specially crafted files. Consequently, an attacker could gain unauthorized access to sensitive information, modify or delete data, or trigger a Denial of Service (DoS) condition on the affected system.
Affected Version(s)
FREQSHIP-mini for Windows versions 8.0.0 to 8.0.2