CVE-2025-5241

Denial-of-Service Vulnerability in MELSEC iQ-F Series

Medium5.3EPSS 0.45%

Published: 11 Jul 2025
Updated: 11 Jul 2025
Reserved: 27 May 2025
Assigned by: Mitsubishi

Description

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lockout legitimate users for a certain period by repeatedly attempting to login with incorrect passwords. The legitimate users will be unable to login until a certain period has passed after the lockout or until the product is reset.

Scores

CVSS scores of CVE-2025-5241, by who scored it
Scored by	CVSS	Score	Vector
MitsubishiCNA (assigner)	3.1	Medium5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVDNVD · Deferred	3.1	Medium5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS (exploitation in 30 days): 0.45% · top 61% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: yes · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.

Weakness

CWE-645 Overly Restrictive Account Lockout Mechanism (opens in a new tab)All about CWE-645 and its CVEs

Affected products

Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/D
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-64MT/D
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-64MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-96MT/D
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-96MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DS-TS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/DSS-TS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MR/DS-TS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MT/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-24MR/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MT/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-40MR/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MT/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UJ-60MR/ES-A
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MT/ESS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-80MR/ES
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-30MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-40MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MT/DSS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5S-60MR/DS
- affected All versions
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5-CCLGN-MS
- affected All versions

References (2)

https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-005_en.pdf (opens in a new tab)vendor-advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-04 (opens in a new tab)government-resource

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2025-5241](https://trackcve.app/badge/CVE-2025-5241.svg)](https://trackcve.app/cve/CVE-2025-5241)

Record last updated 11 Jul 2025, 13:34 UTC.