This vulnerability (CVE-2025-7376) involves improper handling of Windows shortcut (.LNK) files in multiple Mitsubishi Electric products including GENESIS64 versions 10.97.3 and prior and related software. The flaw allows a local authenticated attacker to create symbolic links that redirect write operations from the affected processes to arbitrary files. This unauthorized write capability can overwrite or destroy files on the PC where the software is installed, potentially causing denial-of-service conditions if critical files are affected. The CVSS 3.1 base score is 5.9, with attack vector local, low attack complexity, low privileges required, and user interaction needed. The impact is high on integrity but no confidentiality or availability impact is noted. No patches or vendor advisories specifying fixes are currently available in the provided data.

An authenticated local attacker can exploit this vulnerability to overwrite arbitrary files by leveraging symbolic links, leading to potential destruction of important files on the affected PC. This can cause denial-of-service conditions if the destroyed files are necessary for normal operation. There is no indication of confidentiality loss or remote exploitation. The impact is limited to integrity and availability disruption on the local system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor Mitsubishi Electric Corporation advisories for updates. Until a fix is available, restricting local user permissions and avoiding untrusted local user access may reduce risk. No vendor advisory states that no action is required or that the issue is already mitigated.