CVE-2025-5514

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-130

Affected software

VendorProductVersions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ES1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/ESS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MT/DSS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/ES1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-32MR/DS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ES1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/ESS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MT/DSS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/ES1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-64MR/DS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/ES1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/ESS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MT/DSS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/ES1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5U-80MR/DS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/D1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/D1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-64MT/DSS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/D1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-96MT/DSS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DS-TS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MT/DSS-TS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UC-32MR/DS-TS1.060 and later
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ESAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/DSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ESSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/DSSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/ESAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/DSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ESAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/DSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ESSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/DSSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/ESAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/DSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ESAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/DSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ESSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/DSSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/ESAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MR/DSAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MT/ES-AAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-24MR/ES-AAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MT/ES-AAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-40MR/ES-AAll versions
Mitsubishi Electric CorporationMELSEC iQ-F Series FX5UJ-60MT/ES-AAll versions

References

Timeline

Published
Aug 25, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-551418.8Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.CVE-2025-551428.8Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.CVE-2025-551436.1Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway beforeCVE-2025-551445.4Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.CVE-2025-551458.9Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.CVE-2025-551464.9An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway beforCVE-2025-551478.8CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and IvaCVE-2025-551487.6Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.CVE-2025-551496.7Tiny-Scientist is a lightweight framework for automating the entire lifecycle of scientific research—from ideation to implementation, writinCVE-2025-55156.3A vulnerability, which was classified as critical, has been found in TOTOLINK X2000R 1.0.0-B20230726.1108. Affected by this issue is some unCVE-2025-551509.8Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/CVE-2025-551519.8Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, the "convert file to
CVE-2025-5514: Medium severity, CVSS 5.3 | Vulnix