{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-3511", "assignerOrgId": "e0f77b61-78fd-4786-b3fb-1ee347a748ad", "state": "PUBLISHED", "assignerShortName": "Mitsubishi", "dateReserved": "2025-04-11T04:10:12.030Z", "datePublished": "2025-04-25T05:14:43.758Z", "dateUpdated": "2026-04-24T07:13:32.562Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "e0f77b61-78fd-4786-b3fb-1ee347a748ad", "shortName": "Mitsubishi", "dateUpdated": "2026-04-24T07:13:32.562Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-1284", "description": "CWE-1284 Improper Validation of Specified Quantity in Input", "type": "CWE"}]}], "impacts": [{"descriptions": [{"lang": "en", "value": "Denial-of-Service"}]}], "affected": [{"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2S1-32D", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2S1-32T", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2B1-32D", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2B1-32T", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GNCF1-32D", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GNCF1-32T", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GNCE3-32D", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN12A4-16D", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN12A2-16T", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2S1-16D", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2S1-16T", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2B1-16D", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2B1-16T", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE", "versions": [{"status": "affected", "version": "09 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4", "versions": [{"status": "affected", "version": "07 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4", "versions": [{"status": "affected", "version": "07 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4", "versions": [{"status": "affected", "version": "07 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4", "versions": [{"status": "affected", "version": "07 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN FPGA module NZ2GN2S-D41P01", "versions": [{"status": "affected", "version": "01"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN FPGA module NZ2GN2S-D41D01", "versions": [{"status": "affected", "version": "01"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN FPGA module NZ2GN2S-D41PD02", "versions": [{"status": "affected", "version": "01"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300", "versions": [{"status": "affected", "version": "1.08J and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60", "versions": [{"status": "affected", "version": "1.08J and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2", "versions": [{"status": "affected", "version": "26 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP", "versions": [{"status": "affected", "version": "10 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX", "versions": [{"status": "affected", "version": "05 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "MELSEC iQ-R Series Ethernet Interface Module RJ71EN71", "versions": [{"status": "affected", "version": "85 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2GACP610-60", "versions": [{"status": "affected", "version": "05 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2KT-NPETNG51", "versions": [{"status": "affected", "version": "05 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS", "versions": [{"status": "affected", "version": "1.020 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET", "versions": [{"status": "affected", "version": "1.200 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "Mitsubishi Electric Corporation", "product": "MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP", "versions": [{"status": "affected", "version": "1.106 and prior"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, and MELSEC iQ-F Series FX5-ENET/IP Ethernet Module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, and MELSEC iQ-F Series FX5-ENET/IP Ethernet Module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets."}]}], "references": [{"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf", "tags": ["vendor-advisory"]}, {"url": "https://jvn.jp/vu/JVNVU96620683/", "tags": ["government-resource"]}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-23T17:46:29.102151Z", "id": "CVE-2025-3511", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-23T17:46:36.083Z"}}]}}
Analysis
EUVD
MITRE
Vulnrichment
NVD
Redhat
OpenCVE Enrichment