CVE-2025-3511

High

Description

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.

SeverityHigh
CVSS7.5
Exploit probability—
ProductCC-Link IE TSN Remote I/O module NZ2GN2S1-32D
PublishedApr 25, 2025
First seenApr 25, 2025
Weakness typeCWE-1284CWE-1284

How to fix

Affected products

ProductAffected versionsFixed in
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32D09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32T09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32D09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32T09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCF1-32D09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCF1-32T09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCE3-32D09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A4-16D09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A2-16T09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-16D09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-16T09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-16D09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-16T09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE09 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD407 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD407 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA407 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA407 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN FPGA module NZ2GN2S-D41P0101—
Mitsubishi Electric Corporation CC-Link IE TSN FPGA module NZ2GN2S-D41D0101—
Mitsubishi Electric Corporation CC-Link IE TSN FPGA module NZ2GN2S-D41PD0201—
Mitsubishi Electric Corporation CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-3001.08J and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-601.08J and prior—
Mitsubishi Electric Corporation MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T226 and prior—
Mitsubishi Electric Corporation MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP10 and prior—
Mitsubishi Electric Corporation MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX05 and prior—
Mitsubishi Electric Corporation MELSEC iQ-R Series Ethernet Interface Module RJ71EN7185 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2GACP610-6005 and prior—
Mitsubishi Electric Corporation CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2KT-NPETNG5105 and prior—
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS1.020 and prior—
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET1.200 and prior—
Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP1.106 and prior—
Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R04ENCPU (Network part)85 and prior—
Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R08ENCPU (Network part)85 and prior—
Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R16ENCPU (Network part)85 and prior—
Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R32ENCPU (Network part)85 and prior—
Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R120ENCPU (Network part)85 and prior—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.