CVE-2025-3511: High severity Mitsubishi Electric CC-Link IE TSN Remote I/O Module vulnerability

Published Apr 25, 2025
·
Updated

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, and MELSEC iQ-F Series FX5-ENET/IP Ethernet Module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.

Affected Software

29 affected components
Mitsubishi Electric CC-Link IE TSN Remote I/O Module
Mitsubishi Electric CC-Link IE TSN Analog-Digital Converter module
Mitsubishi Electric CC-Link IE TSN Digital-Analog Converter Module
Mitsubishi Electric CC-Link IE TSN FPGA module
Mitsubishi Electric CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY
Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module
Mitsubishi Electric MELSEC iQ-R Series Ethernet Interface Module
Mitsubishi Electric CC-Link IE TSN Master/Local Station Communication LSI CP610
: Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32D/32T/32TE/32DT/32DTE<=09
: Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32D/32T/32TE/32DT/32DTE<=09
: Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCF1-32D/32T<=09
: Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCE3-32D/32DT<=09
: Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A4-16D/16DE<=09
: Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A2-16T/16TE<=09
: Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT/16DTE<=09
: Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16D/16T/16TE<=09
: Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16D/16T/16TE<=09
: Mitsubishi Electric CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4<=07
: Mitsubishi Electric CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4<=07
: Mitsubishi Electric CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4<=07
: Mitsubishi Electric CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4<=07
: Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41P01/D41D01/D41PD02=01
: Mitsubishi Electric CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300/60: Versions 1.08J and prior
: Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2<=26
: Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP<=10
: Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX<=05
: Mitsubishi Electric MELSEC iQ-R Series Ethernet Interface Module RJ71EN71<=85
: Mitsubishi Electric CC-Link IE TSN master/local Station Communication LSI CP610 NZ2GACP610-60<=05
: Mitsubishi Electric CC-Link IE TSN master/local Station Communication LSI CP610 NZ2KT-NPETNG51<=05

Event History

Apr 25, 2025
CVE Published
via MITRE·05:14 AM
Data Sourced
via MITRE·05:14 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeakness
Oct 15, 2025
Data Sourced
via ICS·06:54 AM
SeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-3511?

CVE-2025-3511 is classified as a high-severity vulnerability due to its potential impact on system integrity.

2

How do I fix CVE-2025-3511?

To fix CVE-2025-3511, apply the latest firmware updates provided by Mitsubishi Electric for the affected modules.

3

What products are affected by CVE-2025-3511?

CVE-2025-3511 affects several Mitsubishi Electric products including the CC-Link IE TSN Remote I/O module and Analog-Digital Converter module.

4

What type of vulnerability is CVE-2025-3511?

CVE-2025-3511 is an Improper Validation of Specified Quantity in Input vulnerability.

5

What are the consequences of CVE-2025-3511 if exploited?

Exploitation of CVE-2025-3511 could lead to unauthorized access and manipulation of system functionality.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203