CVE-2025-8531: Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU vulnerability
Mitsubishi Electric Corporation · MELSEC-Q Series Q03UDVCPU
Vendor fix available · Affected: Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 65% of scored CVEs
DescriptionCVE.org
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q06UDVCPU, Q13UDVCPU, Q26UDVCPU, Q04UDPVCPU, Q06UDPVCPU, Q13UDPVCPU, and Q26UDPVCPU with the first 5 digits of serial No. "24082" to "27081" allows a remote attacker to cause an integer underflow by sending specially crafted packets to the affected product to stop Ethernet communication and the execution of control programs on the product, when the user authentication function is enabled. The user authentication function is enabled by default only when settings are configured by GX Works2, which complies with the Cybersecurity Law of the People's Republic of China, and is normally disabled.
Affected products9
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Mitsubishi Electric Corporation · MELSEC-Q Series Q03UDVCPUThe first 5 digits of serial No. "24082" to "27081"
- Mitsubishi Electric Corporation · MELSEC-Q Series Q04UDVCPUThe first 5 digits of serial No. "24082" to "27081"
- Mitsubishi Electric Corporation · MELSEC-Q Series Q06UDVCPUThe first 5 digits of serial No. "24082" to "27081"
- Mitsubishi Electric Corporation · MELSEC-Q Series Q13UDVCPUThe first 5 digits of serial No. "24082" to "27081"
- Mitsubishi Electric Corporation · MELSEC-Q Series Q26UDVCPUThe first 5 digits of serial No. "24082" to "27081"
- Mitsubishi Electric Corporation · MELSEC-Q Series Q04UDPVCPUThe first 5 digits of serial No. "24082" to "27081"
- Mitsubishi Electric Corporation · MELSEC-Q Series Q06UDPVCPUThe first 5 digits of serial No. "24082" to "27081"
- Mitsubishi Electric Corporation · MELSEC-Q Series Q13UDPVCPUThe first 5 digits of serial No. "24082" to "27081"
- Mitsubishi Electric Corporation · MELSEC-Q Series Q26UDPVCPUThe first 5 digits of serial No. "24082" to "27081"
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Published
- September 2025
CoverageNo articles yet
No CyberSIXT article names CVE-2025-8531 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.