CVE-2025-7731Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module

7.5HighCVSS base score
0.35%Exploitation in 30 daysEPSS · top 71% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
NonePublic exploitsnone known yet

Description

Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information.

Timeline

2025
16 Jul 2025
16 Jul 2025
ID reserved
By Mitsubishi
1 Sept 202547 days later
1 Sept 2025· 47 days later
Published
2 Sept 20251 day later
2 Sept 2025· 1 day later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2025-7731, by who scored it
Scored by	CVSS	Score	Vector
MitsubishiCNA (assigner)	3.1	High7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVDNVD · Deferred	3.1	High7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS (exploitation in 30 days): 0.35% · top 71% of all CVEs (14 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Affected products

Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/D
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-64MT/D
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-64MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-96MT/D
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-96MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DS-TS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DSS-TS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MR/DS-TS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MR/DS
- affected All versions

References3

https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-012_en.pdf (opens in a new tab)vendor-advisory
https://jvn.jp/vu/JVNVU90041458/ (opens in a new tab)government-resource
https://www.cisa.gov/news-events/ics-advisories/icsa-25-240-02 (opens in a new tab)government-resource

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2025-7731](https://cveledger.app/badge/CVE-2025-7731.svg)](https://cveledger.app/cve/CVE-2025-7731)

Record last updated 2 Sept 2025, 19:28 UTC.