CVE-2025-8531Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU,…
- 6.8MediumCVSS base score
- 1.1%Exploitation in 30 daysEPSS · top 35% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q06UDVCPU, Q13UDVCPU, Q26UDVCPU, Q04UDPVCPU, Q06UDPVCPU, Q13UDPVCPU, and Q26UDPVCPU with the first 5 digits of serial No. "24082" to "27081" allows a remote attacker to cause an integer underflow by sending specially crafted packets to the affected product to stop Ethernet communication and the execution of control programs on the product, when the user authentication function is enabled. The user authentication function is enabled by default only when settings are configured by GX Works2, which complies with the Cybersecurity Law of the People's Republic of China, and is normally disabled.
Timeline
ID reserved
By Mitsubishi
- 46 days later
· 46 days later
Published
- 5 days later
· 5 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| MitsubishiCNA (assigner) | 3.1 | Medium6.8 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H |
| NVDNVD · Deferred | 3.1 | Medium6.8 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 1.1% · top 35% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.
Affected products
Mitsubishi Electric Corporation · MELSEC-Q Series Q03UDVCPU
- affected The first 5 digits of serial No. "24082" to "27081"
Mitsubishi Electric Corporation · MELSEC-Q Series Q04UDVCPU
- affected The first 5 digits of serial No. "24082" to "27081"
Mitsubishi Electric Corporation · MELSEC-Q Series Q06UDVCPU
- affected The first 5 digits of serial No. "24082" to "27081"
Mitsubishi Electric Corporation · MELSEC-Q Series Q13UDVCPU
- affected The first 5 digits of serial No. "24082" to "27081"
Mitsubishi Electric Corporation · MELSEC-Q Series Q26UDVCPU
- affected The first 5 digits of serial No. "24082" to "27081"
Mitsubishi Electric Corporation · MELSEC-Q Series Q04UDPVCPU
- affected The first 5 digits of serial No. "24082" to "27081"
Mitsubishi Electric Corporation · MELSEC-Q Series Q06UDPVCPU
- affected The first 5 digits of serial No. "24082" to "27081"
Mitsubishi Electric Corporation · MELSEC-Q Series Q13UDPVCPU
- affected The first 5 digits of serial No. "24082" to "27081"
Mitsubishi Electric Corporation · MELSEC-Q Series Q26UDPVCPU
- affected The first 5 digits of serial No. "24082" to "27081"
References
References3
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-30300 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-8531)Record last updated .