Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information.
Metrics
Affected Vendors & Products
References
History
Tue, 02 Sep 2025 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Mon, 01 Sep 2025 09:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Mitsubishi Electric
Mitsubishi Electric melsec Iq-f Series |
|
Vendors & Products |
Mitsubishi Electric
Mitsubishi Electric melsec Iq-f Series |
Mon, 01 Sep 2025 04:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information. | |
Title | Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module | |
Weaknesses | CWE-319 | |
References |
| |
Metrics |
cvssV3_1
|

Status: PUBLISHED
Assigner: Mitsubishi
Published:
Updated: 2025-09-02T19:28:39.347Z
Reserved: 2025-07-16T22:31:25.034Z
Link: CVE-2025-7731

Updated: 2025-09-02T19:28:34.649Z

Status : Awaiting Analysis
Published: 2025-09-01T04:15:51.357
Modified: 2025-09-02T15:55:25.420
Link: CVE-2025-7731

No data.

Updated: 2025-09-01T09:24:46Z