Analysis Summary

CVE-2025-3511

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module and CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.

Impact

• Denial of Service

Indicators of Compromise

CVE

• CVE-2025-3511

Affected Vendors

Affected Products

• Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32D
• Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32T
• Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32D
• Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE
• Mitsubishi Electric Corporation CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60 - 1.08J
• Mitsubishi Electric Corporation CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300 - 1.08J

Remediation

Refer to Mitsubishi Electric Website for patch, upgrade, or suggested workaround information.

Mitsubishi Security Advisory