CVE-2025-7731

Published Sep 1, 2025

Last updated 5 months ago

CVSS high 7.5
ICS

Overview

Description
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information.
Source
Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.5
Impact score
3.6
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity
HIGH

Weaknesses

Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp
CWE-319

Social media

Hype score
Not currently trending

  1. CVE-2025-7731 Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker … https://t.co/M62kyEaFsr

    @CVEnew

    1 Sept 2025

    403 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform.•CVE-2024-10085
  2. Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability•CVE-2026-16812
  3. Check Point SmartConsole Improper Authentication Vulnerability•CVE-2026-16232
  4. Microsoft SharePoint Deserialization of Untrusted Data Vulnerability•CVE-2026-58644
  5. Microsoft SharePoint Deserialization of Untrusted Data Vulnerability •CVE-2026-50522

References

Sources include official advisories and independent security research.