Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-3128 EUVD-2025-25588GHSA-6c7p-gpwf-3j7p

Mitsubishi Electric Europe smartRTU OS Command Injection

Published Aug 21, 2025 · Updated Aug 22, 2025 · Assigned by icscert

Description

A remote unauthenticated attacker who has bypassed authentication could
execute arbitrary OS commands to disclose, tamper with, destroy or
delete information in Mitsubishi Electric smartRTU, or cause a denial-of
service condition on the product.

Affected products

VendorProductAffectedFixed
Mitsubishi Electric Europe smartRTU ≤ 3.37 —

Advisories 1

References