CVE-2025-15080: Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in Mitsubishi Electric proprietary protocol communication and SLMP communication for FA products
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric MELSEC iQ-R Series R08PCPU, R16PCPU, R32PCPU, and R120PCPU allows an unauthenticated attacker to read device data or part of a control program from the affected product, write device data in the affected product, or cause a denial of service (DoS) condition on the affected product by sending a specially crafted packet containing a specific command to the affected product.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15080?
The severity of CVE-2025-15080 is considered high due to its potential for information disclosure, tampering, and denial of service.
How do I fix CVE-2025-15080?
To fix CVE-2025-15080, apply the latest security patches and updates provided by Mitsubishi Electric for the MELSEC iQ-R Series.
What products are affected by CVE-2025-15080?
CVE-2025-15080 specifically affects the Mitsubishi Electric MELSEC iQ-R Series.
What risks are associated with CVE-2025-15080?
The risks associated with CVE-2025-15080 include potential unauthorized access to sensitive information, data tampering, and service disruptions.
Is there a workaround for CVE-2025-15080?
Currently, no specific workarounds are recommended for CVE-2025-15080, so it is crucial to apply the official fix as soon as possible.