CVE-2025-7405

Publication date

2025-09-01 03:54:47

Family

Mitsubishi

State

PUBLISHED

Description

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not have authentication features.