CVE-2025-5514

MEDIUM5.3

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

Published Aug 25, 2025

Modified 6 months ago

Details

Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.

References

WEB

https://jvn.jp/vu/JVNVU90316328/

WEB

https://www.cisa.gov/news-events/ics-advisories/icsa-25-233-01

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-5514

ADVISORY

https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-010_en.pdf

CVSS Analysis

CVSS v3.1

5.3