cve-2025-2399

A newly disclosed denial-of-service flaw in Mitsubishi Electric’s CNC software stack is a reminder that industrial systems often fail in the least glamorous place: basic input validation. The issue, tracked as CVE-2025-2399, can let a remote attacker trigger an out-of-bounds read by sending...