Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.
Metrics
Affected Vendors & Products
References
History
Tue, 26 Aug 2025 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Mitsubishi Electric
Mitsubishi Electric melsec Iq-f Series |
|
| Vendors & Products |
Mitsubishi Electric
Mitsubishi Electric melsec Iq-f Series |
Mon, 25 Aug 2025 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Mon, 25 Aug 2025 06:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request. | |
| Title | Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module | |
| Weaknesses | CWE-130 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: Mitsubishi
Published: 2025-08-25T05:55:32.622Z
Updated: 2025-08-26T04:19:57.230Z
Reserved: 2025-06-03T06:22:17.624Z
Link: CVE-2025-5514
Updated: 2025-08-25T18:01:51.757Z
Status : Awaiting Analysis
Published: 2025-08-25T06:15:27.933
Modified: 2025-08-25T20:24:45.327
Link: CVE-2025-5514
No data.