Skip to content
Fencer Vulns
high 7.5

CVE-2025-3511 json

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Li…

published 2025-04-25 18 mo ago modified 2026-08-27 2 mo ago also EUVD-2025-12400

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.9%
EPSS 0.9% chance of exploitation in 30 days, percentile 60%
public exploits
0
none known

Summary

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-128-03 updated cvss 7.5

Mitsubishi Electric Multiple FA Products (Update D)

  • Mitsubishi Electric CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4 <=07 Mitsubishi Electric CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4 <=07 Mitsubishi Electric CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4 <=07 Mitsubishi Electric CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4 <=07 Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41D01 01 Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41P01 01
    +34 more products
    Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41PD02 01 Mitsubishi Electric CC-Link IE TSN master/local Station Communication LSI CP610 NZ2GACP610-60 <=05 Mitsubishi Electric CC-Link IE TSN master/local Station Communication LSI CP610 NZ2KT-NPETNG51 <=05 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16D <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16T <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32D <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32T <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16D <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16T <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32D <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32T <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A2-16T <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A4-16D <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCE3-32D <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCF1-32D <=09 Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCF1-32T <=09 Mitsubishi Electric CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60 <=1.08J Mitsubishi Electric CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300 <=1.08J Mitsubishi Electric MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS <=1.020 Mitsubishi Electric MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET <=1.200 Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP <=1.106
    affected: vendor fix, mitigation mitsubishielectric.com

9 more affected in the full advisory

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
12 mo ago

Exploit prediction

0.93% chance of exploitation in the next 30 days, higher than 60% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32D
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32T
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32D
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32T
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCF1-32D
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCF1-32T
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCE3-32D
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A4-16D
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A2-16T
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-16D
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-16T
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-16D
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-16T
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE
  • Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4
  • Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4
  • Mitsubishi Electric Corporation CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4
  • Mitsubishi Electric Corporation CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4
  • Mitsubishi Electric Corporation CC-Link IE TSN FPGA module NZ2GN2S-D41P01
  • Mitsubishi Electric Corporation CC-Link IE TSN FPGA module NZ2GN2S-D41D01
  • Mitsubishi Electric Corporation CC-Link IE TSN FPGA module NZ2GN2S-D41PD02
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300
  • Mitsubishi Electric Corporation CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60
  • Mitsubishi Electric Corporation MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2
  • Mitsubishi Electric Corporation MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP
  • Mitsubishi Electric Corporation MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX
  • Mitsubishi Electric Corporation MELSEC iQ-R Series Ethernet Interface Module RJ71EN71
  • Mitsubishi Electric Corporation CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2GACP610-60
  • Mitsubishi Electric Corporation CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2KT-NPETNG51
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET
  • Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP
  • Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R04ENCPU (Network part)
  • Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R08ENCPU (Network part)
  • Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R16ENCPU (Network part)
  • Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R32ENCPU (Network part)
  • Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R120ENCPU (Network part)

Classification

Weakness
  • CWE-1284 Improper Validation of Specified Quantity in Input

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.