Mitsubishi Electric FA Engineering Software Products

An attacker with local access and elevated privileges could extract sensitive information from these industrial controllers, potentially including system configuration, process parameters, or other operational data stored on the device.

Organizations operating industrial automation systems, particularly in the energy sector, using Mitsubishi Electric MELIPC edge controllers (MI series) or MELSEC iQ-R and MELSEC Q series CPUs for process control, data logging, or safety-critical applications.

An attacker must gain physical access to the device or obtain high-level administrative credentials through social engineering or prior system compromise. The attacker would then exploit the information disclosure vulnerability to read sensitive data from the controller's memory or storage, potentially revealing process logic, security configurations, or operational parameters.