Login Request a demo
High severity · published Apr 25, 2025
CVE-2025-3511
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter…
7.5
CVSS
0.9%
EPSS
No
On KEV
Description
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4 · Mitsubishi Electric Corporation
07 and prior · source: vendor
CI
CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4 · Mitsubishi Electric Corporation
07 and prior · source: vendor
CI
CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4 · Mitsubishi Electric Corporation
07 and prior · source: vendor
CI
CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4 · Mitsubishi Electric Corporation
07 and prior · source: vendor
CI
CC-Link IE TSN FPGA module NZ2GN2S-D41D01 · Mitsubishi Electric Corporation
01 · source: vendor
CI
CC-Link IE TSN FPGA module NZ2GN2S-D41P01 · Mitsubishi Electric Corporation
01 · source: vendor
CI
CC-Link IE TSN FPGA module NZ2GN2S-D41PD02 · Mitsubishi Electric Corporation
01 · source: vendor
CI
CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2GACP610-60 · Mitsubishi Electric Corporation
05 and prior · source: vendor
CI
CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2KT-NPETNG51 · Mitsubishi Electric Corporation
05 and prior · source: vendor
CI
CC-Link IE TSN Remote I/O module NZ2GN12A2-16T · Mitsubishi Electric Corporation
09 and prior · source: vendor
CI
CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE · Mitsubishi Electric Corporation
09 and prior · source: vendor
CI
CC-Link IE TSN Remote I/O module NZ2GN12A4-16D · Mitsubishi Electric Corporation
09 and prior · source: vendor
In the news
VulnerabilityHigh
Mitsubishi Electric Multiple FA Products (Update D)
View CSAF Summary Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition, a timeout error, or a communication delay by sending a specially crafted UDP packet to the product. The following versions of Mitsubishi Electric Multiple FA Products (Update D) are affected: Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32D <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32T <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32D <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32T <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCF1-32D <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCF1-32T <=09 (CVE-2025-3511) Mitsubishi Electric CC-Link IE TSN Remote ...
CVE-2025-3511
Aug 27, 2026·CISA Advisories
Affected product
CI
CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4
Mitsubishi Electric Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-3511
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-3511
jvn.jp
https://jvn.jp/vu/JVNVU96620683/
www.cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03
www.mitsubishielectric.com
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf