Missing Authentication Vulnerability in Mitsubishi Electric MELSEC iQ-F Series CPU Module
CVE-2025-7405

7.3HIGH

Key Information:

Vendor: Mitsubishi Electric Corporation
Status: Melsec Iq-f Series Fx5u-32mt/es; Melsec Iq-f Series Fx5u-32mt/ds; Melsec Iq-f Series Fx5u-32mt/ess; Melsec Iq-f Series Fx5u-32mt/dss
Vendor: CVE Published:; 1 September 2025

🔔 Create Mitsubishi Electric Corporation Vulnerability Alert

What is CVE-2025-7405?

A vulnerability exists in the Mitsubishi Electric MELSEC iQ-F Series CPU module that allows remote, unauthenticated attackers to manipulate device values. This flaw is due to the lack of authentication in the MODBUS/TCP implementation, enabling unauthorized users to halt program operations or change critical device settings. Organizations using these products should assess their security posture and apply necessary mitigations to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch