CVE-2025-5514

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

Published Aug 25, 2025 CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-25657 Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.
History
Type Values Removed Values Added
First Time appeared Mitsubishi Electric
Mitsubishi Electric melsec Iq-f Series
Vendors & Products Mitsubishi Electric
Mitsubishi Electric melsec Iq-f Series
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.
Title Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module
Weaknesses CWE-130
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Mitsubishi
Published
Updated
Aug 26, 2025, 4:19 AM
Reserved
Jun 3, 2025, 6:22 AM
Status
Deferred
Published
Aug 25, 2025, 6:15 AM
Modified
Jun 17, 2026, 9:48 AM