{"id":"CVE-2025-3511","aliases":["EUVD-2025-12400","GHSA-f46p-qr4h-m6p4"],"status":"published","title":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric...","description":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00929,"percentile":0.60884,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1284"],"published":"2025-04-25T05:14:43Z","modified":"2026-08-27T06:16:50Z","products":[{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn analog-digital converter module nz2gn2b-60ad4"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn analog-digital converter module nz2gn2s-60ad4"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn digital-analog converter module nz2gn2b-60da4"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn digital-analog converter module nz2gn2s-60da4"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn fpga module nz2gn2s-d41d01"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn fpga module nz2gn2s-d41p01"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn fpga module nz2gn2s-d41pd02"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn master/local station communication lsi cp610 nz2gacp610-60"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn master/local station communication lsi cp610 nz2kt-npetng51"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn12a2-16t"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn12a2-16te"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn12a4-16d"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn12a4-16de"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn12a42-16dt"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn12a42-16dte"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2b1-16d"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2b1-16t"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2b1-16te"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2b1-32d"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2b1-32dt"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2b1-32dte"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2b1-32t"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2b1-32te"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2s1-16d"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2s1-16t"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2s1-16te"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2s1-32d"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2s1-32dt"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2s1-32dte"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2s1-32t"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gn2s1-32te"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gnce3-32d"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gnce3-32dt"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gncf1-32d"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote i/o module nz2gncf1-32t"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote station communication lsi cp620 with gbe-phy nz2gacp620-300"},{"vendor":"mitsubishi electric corporation","product":"cc-link ie tsn remote station communication lsi cp620 with gbe-phy nz2gacp620-60"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5 cc-link ie tsn master/local module fx5-cclgn-ms"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5 ethernet module fx5-enet"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-f series fx5-enet/ip ethernet module fx5-enet/ip"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series cc-link ie tsn master/local module rj71gn11-eip"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series cc-link ie tsn master/local module rj71gn11-sx"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series cc-link ie tsn master/local module rj71gn11-t2"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series cpu module r04encpu (network part)"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series cpu module r08encpu (network part)"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series cpu module r120encpu (network part)"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series cpu module r16encpu (network part)"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series cpu module r32encpu (network part)"},{"vendor":"mitsubishi electric corporation","product":"melsec iq-r series ethernet interface module rj71en71"}],"references":[{"url":"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf","tags":["vendor-advisory"]},{"url":"https://jvn.jp/vu/JVNVU96620683/","tags":["government-resource"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3511"},{"url":"https://jvn.jp/vu/JVNVU96620683"},{"url":"https://github.com/advisories/GHSA-f46p-qr4h-m6p4"}],"sources":{"cve":[{"id":"CVE-2025-3511","description":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.","status":"published","published":"2025-04-25T05:14:43.758Z","modified":"2026-08-27T05:32:29.296Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T14:32:39.378527Z"}],"euvd":[{"id":"EUVD-2025-12400","description":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.","status":"published","published":"2025-04-25T05:14:43Z","modified":"2026-08-27T05:32:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:01:28.581047Z"}],"ghsa":[{"id":"GHSA-f46p-qr4h-m6p4","title":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric...","description":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module and CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.","status":"published","published":"2025-04-25T06:30:56Z","modified":"2025-10-10T09:30:48Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T15:03:55.615501Z"}],"nvd":[{"id":"CVE-2025-3511","description":"Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.","status":"published","published":"2025-04-25T06:15:45.753Z","modified":"2026-08-27T06:16:50.267Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T14:11:02.570368Z"}]}}