CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.3. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-7405
Severity
HIGH
CVSS
7.3
EPSS
0.46%
Original NVD Description
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not have authentication features.