CVE-2025-3511 - CVE House
Back to Database
Status published High CVE-2025-3511

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi...

Vulnerability Description

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, and MELSEC iQ-F Series FX5-ENET/IP Ethernet Module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-3511

Credits & Attribution

No credits recorded in the NVD database.

References

More from Mitsubishi Electric Corporation

View All →
CVE-2025-8531
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...
Medium 6.8
CVE-2025-7731
Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module
High 7.5
CVE-2025-7405
Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module
High 7.3
CVE-2025-7376
Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS
Medium 5.9
CVE-2025-5514
Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module
Medium 5.3

Affected Vendor

Mitsubishi Electric Corporation

View all reports →

Affected Software

CC-Link IE TSN Remote I/O module NZ2GN2S1-32D, CC-Link IE TSN Remote I/O module NZ2GN2S1-32T, CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE, CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT, CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE, CC-Link IE TSN Remote I/O module NZ2GN2B1-32D, CC-Link IE TSN Remote I/O module NZ2GN2B1-32T, CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE, CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT, CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE, CC-Link IE TSN Remote I/O module NZ2GNCF1-32D, CC-Link IE TSN Remote I/O module NZ2GNCF1-32T, CC-Link IE TSN Remote I/O module NZ2GNCE3-32D, CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT, CC-Link IE TSN Remote I/O module NZ2GN12A4-16D, CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE, CC-Link IE TSN Remote I/O module NZ2GN12A2-16T, CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE, CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT, CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE, CC-Link IE TSN Remote I/O module NZ2GN2S1-16D, CC-Link IE TSN Remote I/O module NZ2GN2S1-16T, CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE, CC-Link IE TSN Remote I/O module NZ2GN2B1-16D, CC-Link IE TSN Remote I/O module NZ2GN2B1-16T, CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE, CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4, CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4, CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4, CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4, CC-Link IE TSN FPGA module NZ2GN2S-D41P01, CC-Link IE TSN FPGA module NZ2GN2S-D41D01, CC-Link IE TSN FPGA module NZ2GN2S-D41PD02, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX, MELSEC iQ-R Series Ethernet Interface Module RJ71EN71, CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2GACP610-60, CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2KT-NPETNG51, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS, MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP
Vulnerable Versions:
09 and prior, 07 and prior, 01, 1.08J and prior, 26 and prior, 10 and prior, 05 and prior, 85 and prior, 1.020 and prior, 1.200 and prior, 1.106 and prior

Timeline

Official Publish: April 25th, 2025
Last Modified: April 24th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-1284

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.