Known vulnerabilities in MELSEC iQ-F FX5UC-32MT/DS-TS

Vendor: Mitsubishi Electric
Software: MELSEC iQ-F FX5UC-32MT/DS-TS
Software CPE: cpe:2.3:h:mitsubishi_electric:melsec_iq-f_fx5uc-32mt_ds-ts:*:*:*:*:*:*:*:*
Website: https://www.mitsubishielectric.com/
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MELSEC iQ-F FX5UC-32MT/DS-TS MELSEC iQ-F FX5UC-32MT/DS-TS is affected by 9 known vulnerabilities: 4 high, 5 medium Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112177 - Overly Restrictive Account Lockout Mechanism
CVE-2025-5241		 CWE-645 Medium
No
No
 - 04.07.2025 SB2025070415
#VU110187 - Improper input validation
CVE-2025-3755		 CWE-20 High
No
No
 - 04.06.2025 SB2025060417
#VU86863 - Insufficient Resource Pool
CVE-2023-7033		 CWE-410 Medium
No
No
 - 28.02.2024 SB2024022804
#VU82713 - Insufficient Verification of Data Authenticity
CVE-2023-4699		 CWE-345 High
No
No
 - 03.11.2023 SB2023110330
#VU82712 - Improper Restriction of Excessive Authentication Attempts
CVE-2023-4625		 CWE-307 Medium
No
No
 - 03.11.2023 SB2023110329
#VU76484 - Memory corruption
CVE-2023-1424		 CWE-119 High
No
No
 1.290 24.05.2023 SB2023052433
#VU71302 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2022-40267		 CWE-337 Medium
Available
No
 1.281 18.01.2023 SB2023011819
#VU63472 - Improper input validation
CVE-2022-25162		 CWE-20 Medium
No
No
 1.270 20.05.2022 SB2022052005
#VU63470 - Improper input validation
CVE-2022-25161		 CWE-20 High
No
No
 1.270 20.05.2022 SB2022052005