CNNVD-202602-871 Information

CNNVD ID

CNNVD-202602-871

CVE-2025-15080

  • CNNVD Published: 2026-02-05

Description (Chinese)

Mitsubishi Electric MELSEC iQ-R series是日本三菱电机(Mitsubishi Electric)公司的一款可编程逻辑控制器。 Mitsubishi Electric MELSEC iQ-R series存在安全漏洞,该漏洞源于输入中指定数量验证不当,可能导致读取设备数据、写入设备数据或导致拒绝服务。以下产品受到影响:Mitsubishi Electric MELSEC iQ-R Series R08PCPU、Mitsubishi Electric MELSEC iQ-R Series R16PCPU、Mitsubishi Electric MELSEC iQ-R Series R32PCPU和Mitsubishi Electric MELSEC iQ-R Series R120PCPU。

Description (English)

Mitsubishi Electric MELSEC iQ-R services are a programmable logical controller for Mitsubishi Electric, Japan. There is a security loophole in the Mitsubishi Electric MELSEC iQ-R series, which arises from the mischecking of specified quantities in the input, which may lead to the reading of equipment data, the writing of equipment data or the denial of services. The following products were affected: Mitsubishi Electric MELSEC iQ-R Series R08PCPU, Mitsubishi Electric MELSEC iQ-R Series R16PCPU, Mitsubishi Electric MELSEC iQ-R Series R12PCPU.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

三菱电机

Published

2026-02-05

Last Modified

2026-02-24

References

https://jvn.jp/vu/JVNVU95093080/ https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-020_en.pdf

Patch

https://www.mitsubishielectric.com/fa/download/index.html

Share on: