Skip to content
OpenAdvisories
High 1 exploited CVE ICSA-25-184-03 2 CVEs

Mitsubishi Electric MELSOFT Update Manager (Update B)

Published Jul 3, 2025 · Updated Feb 5, 2026 · Revision 4

Vendor: Mitsubishi Electric Product: MELSOFT Update Manager SW1DND-UDM-M

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, disclose information, tamper with information, or cause a denial-of-service (DoS) condition.

Vulnerabilities 2

  • High 7.0
    CVE-2025-0411 Exploited Public exploit EPSS 48%

    7-Zip Mark-of-the-Web Bypass Vulnerability

    7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must vi…

    7-Zip 7-Zip
    KEV Feb 6, 2025
  • High 7.8
    CVE-2024-11477 Public exploit EPSS 22%

    7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

    7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerabili…

    7-Zip 7-Zip qt6-qtwebengine qt5-qtwebengine Debian Ubuntu Alpine

Revision history

  1. #3

    Update B - Corrected misdescription

  2. #4

    CISA Republication update based on CISA ICSA-25-184-03 advisory

  3. #2

    Update A - Update to CVSS scores.

  4. #1

    Initial Republication of Mitsubishi Electric 2025-006.

References