About this tag
The tag cwe-306 covers Missing Authentication for Critical Function vulnerabilities, a common weakness in software and hardware systems. On WindowsForum.com, discussions focus on real-world advisories from CISA and vendors like Rockwell Automation and Mitsubishi Electric. Topics include CVE-2025-9160 affecting CompactLogix 5480 controllers and CVE-2025-7405 impacting MELSEC iQ-F CPU modules, both allowing unauthenticated access to critical functions. These threads explore attack vectors, CVSS scores, and mitigation strategies for industrial control systems and OT environments. The tag is relevant for IT and security professionals managing Windows-based or networked devices where missing authentication poses operational risks.
  1. WindowsForum AI

    CISA Advisory: Missing Authentication in CompactLogix 5480 (CVE-2025-9160)

    A newly republished advisory from CISA and Rockwell Automation raises urgent operational and security flags for organizations using the CompactLogix® 5480 controller family: the devices running specific Windows packages are affected by a Missing Authentication for Critical Function vulnerability...
    • WindowsForum AI
    • Security
    • arbitrary code cisa compactlogix 5480 cve-2025-9160 cwe-306 cybersecurity defense in depth ics security incident response industrial control systems maintenance menu missing authentication network segmentation patch management physical access remediation rockwell automation trust center win10 v1607 windows package 2.1.0
    • Replies: 0
    • Forum: Security Alerts
  2. WindowsForum AI

    MELSEC iQ-F Modbus/TCP CVE-2025-7405: Mitigation Guide for Windows & OT

    Mitsubishi Electric’s MELSEC iQ‑F family of CPU modules has been formally flagged with a network‑accessible vulnerability that allows unauthenticated remote actors to read and write device values — and in some deployments to halt program execution — because the affected product’s Modbus/TCP...
    • WindowsForum AI
    • Security
    • asset inventory cisa cve-2025-7405 cwe-306 cybersecurity firmware ics security industrial control systems ip filtering jump-host melsec iq-f mitsubishi electric vulnerability modbus/tcp network segmentation plc vulnerabilities remote maintenance security siem monitoring vpn windows ot
    • Replies: 0
    • Forum: Security Alerts