High · 7.5 CVE-2025-3232 EUVD-2025-205305GHSA-54pw-8jmv-p9rc

Mitsubishi Electric Europe smartRTU Missing Authentication for Critical Function

Published Dec 24, 2025 · Updated Dec 24, 2025 · Assigned by icscert

Vendor: Mitsubishi Electric Europe Product: smartRTU Category: ICS / OT

Description

A remote unauthenticated attacker may be able to bypass authentication
by utilizing a specific API route to execute arbitrary OS commands.

Affected products

Vendor	Product	Affected	Fixed
Mitsubishi Electric Europe	smartRTU	≤ 3.37	—

Advisories 1

ICSA-25-105-09 Mitsubishi Electric Europe B.V. smartRTU CISA ICS & IT advisories · May 6, 2025

References