ICSA-25-184-04 · Published 2025-07-03 · View on CISA ICS-CERT ↗

Mitsubishi Electric MELSEC iQ-F Series

CVSS 5.3 MEDIUM

Risk Summary

Successful exploitation of this vulnerability could result in a denial-of-service condition for legitimate users for a certain period by repeatedly attempting to log in with incorrect passwords. When the product repeatedly receives unauthorized logins from an attacker, legitimate users will be unable to be authenticated until a certain period has passed after the lockout or until the product is reset.

CVEs (1)

CVE-2025-5241

Remediations

Mitsubishi Electric Corporation has stated that there are no plans to release a fixed version, so please implement the following mitigation measures to minimize the risk of exploiting this vulnerability:
Use a firewall or virtual private network (VPN), etc. to prevent unauthorized access when Internet access is required.
Use within a LAN and block access from untrusted networks and hosts through firewalls.
Restrict physical access to the affected products and the LAN that is connected to them.
Use IP filter function to block access from untrusted hosts. *-* NOTE: For details on the IP filter function, please refer to the following manual for each product. *-* "13.1 IP Filter Function" in the MELSEC iQ-F FX5 User's Manual (Communication) *-* "4.5 Security" in the MELSEC iQ-F FX5 CC-Link IE TSN Master/Local Module User's Manual
NOTE: For details on the IP filter function, please refer to the following manual for each product.
"13.1 IP Filter Function" in the MELSEC iQ-F FX5 User's Manual (Communication)
"4.5 Security" in the MELSEC iQ-F FX5 CC-Link IE TSN Master/Local Module User's Manual
Mitsubishi Electric Corporation recommends downloading the manual from the following Mitsubishi Electric Website.
See Mitsubishi Electric's security bulletin for more information.

Affected Vendors

Mitsubishi Electric Corporation

Affected Products (73)

Mitsubishi Electric Corporation · FX5U-32MT/ES vers:all/*

Mitsubishi Electric Corporation · FX5U-32MT/DS vers:all/*

Mitsubishi Electric Corporation · FX5U-32MT/ESS vers:all/*

Mitsubishi Electric Corporation · FX5U-32MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5U-32MR/ES vers:all/*

Mitsubishi Electric Corporation · FX5U-32MR/DS vers:all/*

Mitsubishi Electric Corporation · FX5U-64MT/ES vers:all/*

Mitsubishi Electric Corporation · FX5U-64MT/DS vers:all/*

Mitsubishi Electric Corporation · FX5U-64MT/ESS vers:all/*

Mitsubishi Electric Corporation · FX5U-64MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5U-64MR/ES vers:all/*

Mitsubishi Electric Corporation · FX5U-64MR/DS vers:all/*

Mitsubishi Electric Corporation · FX5U-80MT/ES vers:all/*

Mitsubishi Electric Corporation · FX5U-80MT/DS vers:all/*

Mitsubishi Electric Corporation · FX5U-80MT/ESS vers:all/*

Mitsubishi Electric Corporation · FX5U-80MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5U-80MR/ES vers:all/*

Mitsubishi Electric Corporation · FX5U-80MR/DS vers:all/*

Mitsubishi Electric Corporation · FX5UC-32MT/D vers:all/*

Mitsubishi Electric Corporation · FX5UC-32MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5UC-64MT/D vers:all/*

Mitsubishi Electric Corporation · FX5UC-64MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5UC-96MT/D vers:all/*

Mitsubishi Electric Corporation · FX5UC-96MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5UC-32MT/DS-TS vers:all/*

Mitsubishi Electric Corporation · FX5UC-32MT/DSS-TS vers:all/*

Mitsubishi Electric Corporation · FX5UC-32MR/DS-TS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-24MT/ES vers:all/*

Mitsubishi Electric Corporation · FX5UJ-24MT/DS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-24MT/ESS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-24MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-24MR/ES vers:all/*

Mitsubishi Electric Corporation · FX5UJ-24MR/DS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-40MT/ES vers:all/*

Mitsubishi Electric Corporation · FX5UJ-40MT/DS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-40MT/ESS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-40MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-40MR/ES vers:all/*

Mitsubishi Electric Corporation · FX5UJ-40MR/DS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-60MT/ES vers:all/*

Mitsubishi Electric Corporation · FX5UJ-60MT/DS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-60MT/ESS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-60MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-60MR/ES vers:all/*

Mitsubishi Electric Corporation · FX5UJ-60MR/DS vers:all/*

Mitsubishi Electric Corporation · FX5UJ-24MT/ES-A vers:all/*

Mitsubishi Electric Corporation · FX5UJ-24MR/ES-A vers:all/*

Mitsubishi Electric Corporation · FX5UJ-40MT/ES-A vers:all/*

Mitsubishi Electric Corporation · FX5UJ-40MR/ES-A vers:all/*

Mitsubishi Electric Corporation · FX5UJ-60MT/ES-A vers:all/*

Mitsubishi Electric Corporation · FX5UJ-60MR/ES-A vers:all/*

Mitsubishi Electric Corporation · FX5S-30MT/ES vers:all/*

Mitsubishi Electric Corporation · FX5S-30MT/DS vers:all/*

Mitsubishi Electric Corporation · FX5S-30MT/ESS vers:all/*

Mitsubishi Electric Corporation · FX5S-30MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5S-30MR/ES vers:all/*

Mitsubishi Electric Corporation · FX5S-30MR/DS vers:all/*

Mitsubishi Electric Corporation · FX5S-40MT/ES vers:all/*

Mitsubishi Electric Corporation · FX5S-40MT/DS vers:all/*

Mitsubishi Electric Corporation · FX5S-40MT/ESS vers:all/*

Mitsubishi Electric Corporation · FX5S-40MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5S-40MR/ES vers:all/*

Mitsubishi Electric Corporation · FX5S-40MR/DS vers:all/*

Mitsubishi Electric Corporation · FX5S-60MT/ES vers:all/*

Mitsubishi Electric Corporation · FX5S-60MT/DS vers:all/*

Mitsubishi Electric Corporation · FX5S-60MT/ESS vers:all/*

Mitsubishi Electric Corporation · FX5S-60MT/DSS vers:all/*

Mitsubishi Electric Corporation · FX5S-60MR/ES vers:all/*

Mitsubishi Electric Corporation · FX5S-60MR/DS vers:all/*

Mitsubishi Electric Corporation · FX5S-80MT/ES vers:all/*

Mitsubishi Electric Corporation · FX5S-80MT/ESS vers:all/*

Mitsubishi Electric Corporation · FX5S-80MR/ES vers:all/*

Mitsubishi Electric Corporation · FX5-CCLGN-MS vers:all/*

Affected Sectors

Critical Manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more