CVE-2025-3755

CRITICAL Year: 2025
CVSS v3 Score
9.1
Critical
Weakness Type
CWE-1285
View all →

Vulnerability Description

Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.

Related Vulnerabilities

CVE-2025-3357

CRITICAL
CVSS:9.8(Critical)

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array.

CWE-12852025

CVE-2022-21821

HIGH
CVSS:7.8(High)

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted f...

CWE-12852022

CVE-2024-10494

HIGH
CVSS:7.8(High)

An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker ...

CWE-12852024

CVE-2024-10495

HIGH
CVSS:7.8(High)

An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation ...

CWE-12852024

CVE-2024-10496

HIGH
CVSS:7.8(High)

An out of bounds read due to improper input validation in BuildFontMap in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an ...

CWE-12852024

CVE-2024-23609

HIGH
CVSS:7.8(High)

An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability ...

CWE-12852024