MELSEC iQ-F Series FX5U-80MT/ES vulnerabilities

5 known vulnerabilities in MELSEC iQ-F Series FX5U-80MT/ES from Mitsubishi Electric. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MELSEC iQ-F Series FX5U-32MT/ES: Cleartext Transmission of Sensitive Information

  CVE-2025-7731Sep 1, 2025Mitsubishi Electric

  Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or wr

• 7.3 High severity

  MELSEC iQ-F Series FX5U-32MT/ES: Missing Authentication for Critical Functionality

  CVE-2025-7405Sep 1, 2025Mitsubishi Electric

  Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since

• 9.1 Critical severity

  MELSEC iQ-F Series FX5U-32MT/ES: Improper Validation of Specified Index, Position, or Offset in Input

  CVE-2025-3755May 29, 2025Mitsubishi Electric

  Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS)

• 8.1 High severity

  MELSEC iQ-F Series FX5U-32MT/ES: Buffer Copy without Checking Size of Input

  CVE-2023-1424May 24, 2023Mitsubishi ElectricEPSS 3.44%

  Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS

• 7.5 High severity

  MELSEC iQ-F Series FX5U-32MT/ES: Insufficiently Protected Credentials

  CVE-2023-0457Mar 3, 2023Mitsubishi ElectricEPSS 1.17%

  Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and