vulnerability
Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M
High
Summary
This advisory details a vulnerability (CVE-2025-53816, CVE-2025-53817, CVE-2025-55188, CVE-2025-11001) within the Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M software. The vulnerability, a heap-based buffer overflow in the 7-Zip component, allows a local attacker to potentially cause a denial-of-service condition or execute arbitrary code. Mitsubishi Electric recommends updating to version 1.015R or later, or implementing temporary mitigations such as network segmentation and restricting user access to minimize the risk until a full patch is available.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data