CVE-2025-5514

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-5514
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://jvn.jp/vu/JVNVU90316328/
https://www.cisa.gov/news-events/ics-advisories/icsa-25-233-01
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-010_en.pdf
Configurations

No configuration.

History

25 Aug 2025, 20:24

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de manejo inadecuado de inconsistencia del parámetro de longitud en la función del servidor web en el módulo de CPU MELSEC iQ-F Series de Mitsubishi Electric Corporation permite que un atacante remoto no autenticado retrase el procesamiento de la función del servidor web y evite que usuarios legítimos utilicen la función del servidor web, enviando una solicitud HTTP especialmente manipulada.

25 Aug 2025, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-25 06:15

Updated : 2025-08-25 20:24

NVD link : CVE-2025-5514

Mitre link : CVE-2025-5514

CVE.ORG link : CVE-2025-5514

JSON object : View

Products Affected

No product.

CWE
CWE-130

Improper Handling of Length Parameter Inconsistency