CVE-2025-2399 - CVE House
Back to Database
Status published Medium CVE-2025-2399

Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series

Vulnerability Description

Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric CNC M800V Series M800VW and M800VS, M80V Series M80V and M80VW, M800 Series M800W and M800S, M80 Series M80 and M80W, E80 Series E80, C80 Series C80, M700V Series M750VW, M720VW, 730VW, M720VS, M730VS, and M750VS, M70V Series M70V, E70 Series E70, and Software Tools NC Trainer2 and NC Trainer2 plus allows a remote attacker to cause an out-of-bounds read, resulting in a denial-of-service condition by sending specially crafted packets to TCP port 683.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-2399

Credits & Attribution

No credits recorded in the NVD database.

References

More from Mitsubishi Electric Corporation

View All →
CVE-2025-8531
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...
Medium 6.8
CVE-2025-7731
Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module
High 7.5
CVE-2025-7405
Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module
High 7.3
CVE-2025-7376
Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS
Medium 5.9
CVE-2025-5514
Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module
Medium 5.3

Affected Vendor

Mitsubishi Electric Corporation

View all reports →

Affected Software

Mitsubishi Electric CNC M800V Series M800VW, Mitsubishi Electric CNC M800V Series M800VS, Mitsubishi Electric CNC M80V Series M80V, Mitsubishi Electric CNC M80V Series M80VW, Mitsubishi Electric CNC M800 Series M800W, Mitsubishi Electric CNC M800 Series M800S, Mitsubishi Electric CNC M80 Series M80, Mitsubishi Electric CNC M80 Series M80W, Mitsubishi Electric CNC E80 Series E80, Mitsubishi Electric CNC C80 Series C80, Mitsubishi Electric CNC M700V Series M750VW, Mitsubishi Electric CNC M700V Series M720VW, Mitsubishi Electric CNC M700V Series M730VW, Mitsubishi Electric CNC M700V Series M720VS, Mitsubishi Electric CNC M700V Series M730VS, Mitsubishi Electric CNC M700V Series M750VS, Mitsubishi Electric CNC M70V Series M70V, Mitsubishi Electric CNC E70 Series E70, Mitsubishi Electric CNC Software Tools NC Trainer2, Mitsubishi Electric CNC Software Tools NC Trainer2 plus
Vulnerable Versions:
System Number BND-2051W000 versions BB and prior, System Number BND-2052W000 versions BB and prior, System Number BND-2053W000 versions BB and prior, System Number BND-2054W000 versions BB and prior, System Number BND-2005W000 versions FM and prior, System Number BND-2006W000 versions FM and prior, System Number BND-2007W000 versions FM and prior, System Number BND-2008W000 versions FM and prior, System Number BND-2009W000 versions FM and prior, System Number BND-2036W000 all versions, System Number BND-1015W002 all versions, System Number BND-1015W000 all versions, System Number BND-1012W000 all versions, System Number BND-1012W002 all versions, System Number BND-1018W000 all versions, System Number BND-1022W000 all versions, System Number BND-1802W000 all versions, System Number BND-1803W000 all versions

Timeline

Official Publish: March 10th, 2026
Last Modified: March 24th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-1285

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.