CVE-2025-3511

Friday, April 25, 2025

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, and MELSEC iQ-F Series FX5-ENET/IP Ethernet Module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.

Affected Software

Vendor	Product	Version Range	Status
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32D	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32T	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32D	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32T	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCF1-32D	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCF1-32T	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCE3-32D	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A4-16D	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A2-16T	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-16D	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-16T	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-16D	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-16T	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE	`09 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4	`07 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4	`07 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4	`07 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4	`07 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN FPGA module NZ2GN2S-D41P01	`01`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN FPGA module NZ2GN2S-D41D01	`01`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN FPGA module NZ2GN2S-D41PD02	`01`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300	`1.08J and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60	`1.08J and prior`	affected
Mitsubishi Electric Corporation	MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2	`26 and prior`	affected
Mitsubishi Electric Corporation	MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP	`10 and prior`	affected
Mitsubishi Electric Corporation	MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX	`05 and prior`	affected
Mitsubishi Electric Corporation	MELSEC iQ-R Series Ethernet Interface Module RJ71EN71	`85 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2GACP610-60	`05 and prior`	affected
Mitsubishi Electric Corporation	CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2KT-NPETNG51	`05 and prior`	affected
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS	`1.020 and prior`	affected
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET	`1.200 and prior`	affected
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP	`1.106 and prior`	affected

Weaknesses

CWE-1284: CWE-1284 Improper Validation of Specified Quantity in Input

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: yes
- Technical Impact: partial

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.