References https://www.mitsubishielectric.com/fa/about-us/security/vulnerability/index.html https://www.cisa.gov/news-events/ics-advisories/icsa-25-153-03 https://www.cisa.gov/news-events/ics-advisories/icsa-25-233-01 https://www.cisa.gov/news-events/ics-advisories/icsa-25-240-01 https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-005_en.pdf https://zeropath.com/blog/cve-2025-7731-mitsubishi-melsec-iqf-cleartext-summary https://www.opswat.com/blog/multiple-cves-uncovered-by-unit-515-in-mitsubishi-melsec-iq-f-series-plcs-immediate-action-required https://nvd.nist.gov/vuln/detail/CVE-2025-5514 https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-012_en.pdf https://www.sentinelone.com/vulnerability-database/cve-2026-1874/
Related VulnerabilitiesSchneider Electric APC NMC /Forms/login1 默认口令漏洞PoCCVE-2018-7765: Schneider Electric U.motion Builder - SQL InjectionZYCOO CooVox Series IP Phone System /login 默认口令漏洞Fujitsu IP Series 权限绕过漏洞(CVE-2023-38433)安科瑞-GetElectricalYYByHour-SQL注入PoCCVE-2018-12675: SV3C HD Camera L Series - Open RedirectPoCCVE-2018-7841: Schneider Electric U.motion Builder - Remote Code ExecutionPoCCVE-2019-1943: Cisco Small Business 200,300 and 500 Series Switches - Open RedirectPoCCVE-2021-1472: Cisco Small Business RV Series - OS Command InjectionPoCCVE-2022-31269: Linear eMerge E3-Series - Information DisclosurePoCCVE-2022-31499: Nortek Linear eMerge E3-Series <0.32-08f - Remote Command Injection