CVE-2025-3755: Mitsubishi Electric Corporation Melsec Iq-F Series FX5S-30mr/ds

Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.

Affected products

Published 2025-05-29. Last modified 2026-06-17.