CVE-2025-7731CWE-319

Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module

High · published September 1, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
26.9
In the wild
Unconfirmed
What it is

Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00345 · 26.9th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2025-09-01T03:57Z
EPSS history
Timeline
  • 01 SEP 03:57Z
    Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module
    cvelistv5