CNNVD-202508-2563 Information

CNNVD ID

CNNVD-202508-2563

CVE-2025-3128

  • CNNVD Published: 2025-08-21

Description (Chinese)

Mitsubishi Electric smartRTU是日本三菱电机(Mitsubishi Electric)公司的一款智能远程终端单元(RTU)。 Mitsubishi Electric smartRTU存在操作系统命令注入漏洞,该漏洞源于身份验证绕过可能导致执行任意OS命令或拒绝服务。

Description (English)

Mitsubishi Electric SmartRTU is an intelligent remote terminal unit (RTU) of Mitsubishi Electric, Japan. There is a loophole in the operating system ordered by Mitsubishi Electric smartRU, which stems from the fact that the identification circumvention may result in the execution of arbitrary OS orders or the denial of services.

Hazard Level

Low

Vulnerability Type

操作系统命令注入

Affected Vendor

MLDB

Published

2025-08-21

Last Modified

2026-02-24

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-09 https://emea.mitsubishielectric.com/fa/products/quality/quality-news-information https://nvd.nist.gov/vuln/detail/CVE-2025-3128

Patch

https://www.mitsubishielectric.com/en/

Share on: