CVE-2025-3511

Published: Apr 25, 2025

Modified: Apr 24, 2026

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, and MELSEC iQ-F Series FX5-ENET/IP Ethernet Module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.

Vendor	Product	Versions
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32D	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32T	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32D	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32T	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCF1-32D	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCF1-32T	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCE3-32D	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A4-16D	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A2-16T	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-16D	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-16T	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-16D	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-16T	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE	affected `09 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4	affected `07 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4	affected `07 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4	affected `07 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4	affected `07 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN FPGA module NZ2GN2S-D41P01	affected `01`
Mitsubishi Electric Corporation	CC-Link IE TSN FPGA module NZ2GN2S-D41D01	affected `01`
Mitsubishi Electric Corporation	CC-Link IE TSN FPGA module NZ2GN2S-D41PD02	affected `01`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300	affected `1.08J and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60	affected `1.08J and prior`
Mitsubishi Electric Corporation	MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2	affected `26 and prior`
Mitsubishi Electric Corporation	MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP	affected `10 and prior`
Mitsubishi Electric Corporation	MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX	affected `05 and prior`
Mitsubishi Electric Corporation	MELSEC iQ-R Series Ethernet Interface Module RJ71EN71	affected `85 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2GACP610-60	affected `05 and prior`
Mitsubishi Electric Corporation	CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2KT-NPETNG51	affected `05 and prior`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS	affected `1.020 and prior`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET	affected `1.200 and prior`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP	affected `1.106 and prior`

Weaknesses (CWE)

CWE-1284

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf

vendor-advisory

https://jvn.jp/vu/JVNVU96620683/

government-resource

https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03

government-resource

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-3511

Description

Affected Products

Weaknesses (CWE)

CVSS v3.1 Details

References