Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-7405 1 Mitsubishi Electric 1 Melsec Iq-f Series 2026-04-15 7.3 High
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not have authentication features.
CVE-2025-7731 1 Mitsubishi Electric 1 Melsec Iq-f Series 2026-04-15 7.5 High
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information.