CVE-2025-5514: Mitsubishi Electric Corporation Melsec Iq-F Series FX5S-30mr/ds

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.

Affected products

Published 2025-08-25. Last modified 2026-06-17.