CVE-2025-3232: Mitsubishi Electric Europe Smartrtu

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A remote unauthenticated attacker may be able to bypass authentication by utilizing a specific API route to execute arbitrary OS commands.

Affected products

• Mitsubishi Electric Europe Smartrtu: up to and including 3.37

Published 2025-12-24. Last modified 2026-10-07.