CVE-2025-3511
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric...
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.
- Record
CVE-2025-3511- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-1284
- Updated
- 2026-11-02
EUVDEUVD-2025-12400
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.
- Record
EUVD-2025-12400- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-f46p-qr4h-m6p4
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric...
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module and CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.
- Record
GHSA-f46p-qr4h-m6p4- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-1284
- Updated
- 2026-11-02
NVD
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.
- Record
CVE-2025-3511- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-1284
- Updated
- 2026-11-02
Affected products
- mitsubishi electric corporation cc-link ie tsn analog-digital converter module nz2gn2b-60ad4
- mitsubishi electric corporation cc-link ie tsn analog-digital converter module nz2gn2s-60ad4
- mitsubishi electric corporation cc-link ie tsn digital-analog converter module nz2gn2b-60da4
- mitsubishi electric corporation cc-link ie tsn digital-analog converter module nz2gn2s-60da4
- mitsubishi electric corporation cc-link ie tsn fpga module nz2gn2s-d41d01
- mitsubishi electric corporation cc-link ie tsn fpga module nz2gn2s-d41p01
- mitsubishi electric corporation cc-link ie tsn fpga module nz2gn2s-d41pd02
- mitsubishi electric corporation cc-link ie tsn master/local station communication lsi cp610 nz2gacp610-60
- mitsubishi electric corporation cc-link ie tsn master/local station communication lsi cp610 nz2kt-npetng51
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn12a2-16t
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn12a2-16te
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn12a4-16d
Show 37 moreShow less
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn12a4-16de
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn12a42-16dt
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn12a42-16dte
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2b1-16d
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2b1-16t
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2b1-16te
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2b1-32d
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2b1-32dt
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2b1-32dte
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2b1-32t
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2b1-32te
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2s1-16d
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2s1-16t
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2s1-16te
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2s1-32d
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2s1-32dt
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2s1-32dte
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2s1-32t
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gn2s1-32te
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gnce3-32d
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gnce3-32dt
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gncf1-32d
- mitsubishi electric corporation cc-link ie tsn remote i/o module nz2gncf1-32t
- mitsubishi electric corporation cc-link ie tsn remote station communication lsi cp620 with gbe-phy nz2gacp620-300
- mitsubishi electric corporation cc-link ie tsn remote station communication lsi cp620 with gbe-phy nz2gacp620-60
- mitsubishi electric corporation melsec iq-f series fx5 cc-link ie tsn master/local module fx5-cclgn-ms
- mitsubishi electric corporation melsec iq-f series fx5 ethernet module fx5-enet
- mitsubishi electric corporation melsec iq-f series fx5-enet/ip ethernet module fx5-enet/ip
- mitsubishi electric corporation melsec iq-r series cc-link ie tsn master/local module rj71gn11-eip
- mitsubishi electric corporation melsec iq-r series cc-link ie tsn master/local module rj71gn11-sx
- mitsubishi electric corporation melsec iq-r series cc-link ie tsn master/local module rj71gn11-t2
- mitsubishi electric corporation melsec iq-r series cpu module r04encpu (network part)
- mitsubishi electric corporation melsec iq-r series cpu module r08encpu (network part)
- mitsubishi electric corporation melsec iq-r series cpu module r120encpu (network part)
- mitsubishi electric corporation melsec iq-r series cpu module r16encpu (network part)
- mitsubishi electric corporation melsec iq-r series cpu module r32encpu (network part)
- mitsubishi electric corporation melsec iq-r series ethernet interface module rj71en71
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-3511 is a high vulnerability (CVSS 7.5) in Mitsubishi Electric Corporation Cc-link Ie Tsn Analog-digital Converter Module Nz2gn2b-60ad4, published April 25, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.93%, the 60th percentile. No source names a fixed version.