Incorrect Default Permissions in Mitsubishi Electric FREQSHIP-mini for Windows

CVE-2025-10314

What is CVE-2025-10314?

A vulnerability exists in Mitsubishi Electric's FREQSHIP-mini for Windows, where incorrect default permissions allow a local attacker to execute arbitrary code with system privileges. This can be accomplished by replacing executable files (EXE) or dynamic link libraries (DLLs) within the installation directory using specially crafted files. Consequently, an attacker could gain unauthorized access to sensitive information, modify or delete data, or trigger a Denial of Service (DoS) condition on the affected system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References