Skip to main content

CISA issues alert on Mitsubishi Electric MELSEC iQ-F Series vulnerability

Source Decision Insights Threat Desk Published November 27, 2025 Companies 1
Human View Machine View

345th article in the last 90 days, one of 455 articles referencing Cybersecurity and Infrastructure Security Agency (CISA). Previous coverage: CISA issues alert on AVEVA Edge cryptographic vulnerability allowing local password brute forcing (Nov 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
Which to buy
Adoption curve
Early Majority
Industry
Industrials / Capital Goods / Industrial Conglomerates / Industrials & Manufacturing

Our classification, not the publisher's statement. Best suited for, not only for.

Mitsubishi Electric's MELSEC iQ-F Series programmable logic controllers are affected by a vulnerability involving improper validation of input quantities, which can result in Denial of Service (DoS).

The issue, identified as CVE-2025-10259, impacts all versions of multiple product models within the MELSEC iQ-F Series. The flaw resides in the Transmission Control Protocol (TCP) communication function on the Central Processing Unit (CPU) module. A remote actor can exploit this by sending specially crafted TCP packets, triggering disconnection of the targeted TCP connection, while other connections remain unaffected. This vulnerability carries a Common Vulnerability Scoring System (CVSS) version 3.1 base score of 5.3, with the vector indicating network-exploitable, low attack complexity, no privileges required, no user interaction, unchanged scope, and impact limited to availability.

Exploitation of this vulnerability can cause a DoS condition on the affected devices, disrupting specific TCP connections.

Mitsubishi Electric advises users to employ a Virtual Private Network (VPN) to secure communications when internet access is necessary and to limit physical access to the products and connected local area networks. Additional guidance is provided in Mitsubishi Electric's advisory 2025-014.

The Cybersecurity and Infrastructure Security Agency emphasizes that organizations should conduct thorough impact analyses and risk assessments before implementing defensive actions. CISA provides recommended practices for control systems security and encourages adoption of strategies aimed at the proactive defense of industrial control system assets.

Information on targeted cyber intrusion detection and mitigation is accessible through resources available on CISA's industrial control systems webpage. Reporting suspected malicious activity through established protocols to CISA is encouraged for incident tracking and correlation. No public reports of exploitation related to this vulnerability have been received by CISA to date.

Blog post, originally published by CISA at cisa.gov.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-issues-alert-on-mitsubishi-electric-melsec-iq-f-series-vulnerability/",
        "name": "CISA issues alert on Mitsubishi Electric MELSEC iQ-F Series vulnerability",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-issues-alert-on-mitsubishi-electric-melsec-iq-f-series-vulnerability/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@type": "Organization",
      "name": "Mitsubishi Electric"
    },
    "articleSection": [
      "Cybersecurity",
      "AI infrastructure",
      "Data Center",
      "Network Operator"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Industrials / Capital Goods / Industrial Conglomerates / Industrials & Manufacturing"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-08-23T14:02:08-06:00",
    "datePublished": "2025-11-27T13:30:14-07:00",
    "description": "CISA reports CVE-2025-10259 affects Mitsubishi Electric MELSEC iQ-F Series, causing denial of service via TCP input validation flaw.",
    "headline": "CISA issues alert on Mitsubishi Electric MELSEC iQ-F Series vulnerability",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "CISA"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-01"
    },
    "keywords": [
      "Central Processing Unit",
      "Common Vulnerability Scoring System",
      "Denial of Service",
      "Transmission Control Protocol",
      "Virtual Private Network",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-issues-alert-on-mitsubishi-electric-melsec-iq-f-series-vulnerability/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages