CVE-2025-15080
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in Mitsubishi Electric proprietary protocol communication and SLMP communication for FA products
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric MELSEC iQ-R Series R08PCPU, R16PCPU, R32PCPU, and R120PCPU allows an unauthenticated attacker to read device data or part of a control program from the affected product, write device data in the affected product, or cause a denial of service (DoS) condition on the affected product by sending a specially crafted packet containing a specific command to the affected product.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
MELSEC iQ-R Series R08PCPU
- Vendor
- Mitsubishi Electric Corporation
- Product
- MELSEC iQ-R Series R08PCPU
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware versions "48" and prior | affected | Unavailable | Unavailable | Unavailable | None listed |
MELSEC iQ-R Series R16PCPU
- Vendor
- Mitsubishi Electric Corporation
- Product
- MELSEC iQ-R Series R16PCPU
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware versions "48" and prior | affected | Unavailable | Unavailable | Unavailable | None listed |
MELSEC iQ-R Series R32PCPU
- Vendor
- Mitsubishi Electric Corporation
- Product
- MELSEC iQ-R Series R32PCPU
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware versions "48" and prior | affected | Unavailable | Unavailable | Unavailable | None listed |
MELSEC iQ-R Series R120PCPU
- Vendor
- Mitsubishi Electric Corporation
- Product
- MELSEC iQ-R Series R120PCPU
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware versions "48" and prior | affected | Unavailable | Unavailable | Unavailable | None listed |