CVE-2025-3128: Mitsubishi Electric Europe Smartrtu

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A remote unauthenticated attacker who has bypassed authentication could execute arbitrary OS commands to disclose, tamper with, destroy or delete information in Mitsubishi Electric smartRTU, or cause a denial-of service condition on the product.

Affected products

• Mitsubishi Electric Europe Smartrtu: up to and including 3.37

Published 2025-08-21. Last modified 2026-06-17.