CVE-2025-7405

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC iQ-F Series CPU module (affected versions not specified)

Description A missing authentication feature in the MODBUS/TCP implementation of the Mitsubishi Electric MELSEC iQ-F Series CPU module allows a remote, unauthenticated attacker to read or write device values and stop program operation. The vulnerability stems from the lack of authentication features within the MODBUS/TCP protocol used by the product.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.