CVE-2025-10259: Mitsubishi Electric Corporation Melsec Iq-F Series FX5S-30mr/ds

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote attacker to disconnect the connection by sending specially crafted TCP packets to cause a denial-of-service (DoS) condition on the products. There is no impact on connections other than the attacked one.

Affected products

Published 2025-11-06. Last modified 2026-06-17.