Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric…
Priority MEDIUM 41CWE-1284Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00929 60th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2S1-32D | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2S1-32T | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2B1-32D | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2B1-32T | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GNCF1-32D | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GNCF1-32T | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GNCE3-32D | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN12A4-16D | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN12A2-16T | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2S1-16D | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2S1-16T | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2B1-16D | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2B1-16T | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE | up to 09 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4 | up to 07 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4 | up to 07 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4 | up to 07 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4 | up to 07 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN FPGA module NZ2GN2S-D41P01 | 01 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN FPGA module NZ2GN2S-D41D01 | 01 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN FPGA module NZ2GN2S-D41PD02 | 01 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300 | up to 1.08J | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60 | up to 1.08J | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2 | up to 26 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP | up to 10 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX | up to 05 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-R Series Ethernet Interface Module RJ71EN71 | up to 85 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2GACP610-60 | up to 05 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2KT-NPETNG51 | up to 05 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS | up to 1.020 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET | up to 1.200 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP | up to 1.106 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-R Series CPU module R04ENCPU (Network part) | up to 85 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-R Series CPU module R08ENCPU (Network part) | up to 85 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-R Series CPU module R16ENCPU (Network part) | up to 85 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-R Series CPU module R32ENCPU (Network part) | up to 85 | — | No fix listed | CNA |
| Mitsubishi Electric Corporation | MELSEC iQ-R Series CPU module R120ENCPU (Network part) | up to 85 | — | No fix listed | CNA |
- CC-Link IE TSN Remote I/O module NZ2GN2S1-32D VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2S1-32T VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2B1-32D VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2B1-32T VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GNCF1-32D VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GNCF1-32T VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GNCE3-32D VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN12A4-16D VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN12A2-16T VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2S1-16D VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2S1-16T VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2B1-16D VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2B1-16T VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE VendorMitsubishi Electric Corporation Affected up to 09 Fixed in — No fix listed CNA
- CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4 VendorMitsubishi Electric Corporation Affected up to 07 Fixed in — No fix listed CNA
- CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4 VendorMitsubishi Electric Corporation Affected up to 07 Fixed in — No fix listed CNA
- CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4 VendorMitsubishi Electric Corporation Affected up to 07 Fixed in — No fix listed CNA
- CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4 VendorMitsubishi Electric Corporation Affected up to 07 Fixed in — No fix listed CNA
- CC-Link IE TSN FPGA module NZ2GN2S-D41P01 VendorMitsubishi Electric Corporation Affected 01 Fixed in — No fix listed CNA
- CC-Link IE TSN FPGA module NZ2GN2S-D41D01 VendorMitsubishi Electric Corporation Affected 01 Fixed in — No fix listed CNA
- CC-Link IE TSN FPGA module NZ2GN2S-D41PD02 VendorMitsubishi Electric Corporation Affected 01 Fixed in — No fix listed CNA
- CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300 VendorMitsubishi Electric Corporation Affected up to 1.08J Fixed in — No fix listed CNA
- CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60 VendorMitsubishi Electric Corporation Affected up to 1.08J Fixed in — No fix listed CNA
- MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2 VendorMitsubishi Electric Corporation Affected up to 26 Fixed in — No fix listed CNA
- MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP VendorMitsubishi Electric Corporation Affected up to 10 Fixed in — No fix listed CNA
- MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX VendorMitsubishi Electric Corporation Affected up to 05 Fixed in — No fix listed CNA
- MELSEC iQ-R Series Ethernet Interface Module RJ71EN71 VendorMitsubishi Electric Corporation Affected up to 85 Fixed in — No fix listed CNA
- CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2GACP610-60 VendorMitsubishi Electric Corporation Affected up to 05 Fixed in — No fix listed CNA
- CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2KT-NPETNG51 VendorMitsubishi Electric Corporation Affected up to 05 Fixed in — No fix listed CNA
- MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS VendorMitsubishi Electric Corporation Affected up to 1.020 Fixed in — No fix listed CNA
- MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET VendorMitsubishi Electric Corporation Affected up to 1.200 Fixed in — No fix listed CNA
- MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP VendorMitsubishi Electric Corporation Affected up to 1.106 Fixed in — No fix listed CNA
- MELSEC iQ-R Series CPU module R04ENCPU (Network part) VendorMitsubishi Electric Corporation Affected up to 85 Fixed in — No fix listed CNA
- MELSEC iQ-R Series CPU module R08ENCPU (Network part) VendorMitsubishi Electric Corporation Affected up to 85 Fixed in — No fix listed CNA
- MELSEC iQ-R Series CPU module R16ENCPU (Network part) VendorMitsubishi Electric Corporation Affected up to 85 Fixed in — No fix listed CNA
- MELSEC iQ-R Series CPU module R32ENCPU (Network part) VendorMitsubishi Electric Corporation Affected up to 85 Fixed in — No fix listed CNA
- MELSEC iQ-R Series CPU module R120ENCPU (Network part) VendorMitsubishi Electric Corporation Affected up to 85 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-3511
- 2026-10-03 Alias added: GHSA-f46p-qr4h-m6p4
References
More Mitsubishi Electric Corporation vulnerabilities
- TI-2022-14737 Deserialization of untrusted data in Mitsubishi Electric Corporation GENESIS64 CVSS 3.1CRITICAL 9.8
- TI-2022-19113 Authentication Bypass Vulnerability in Web Server Function on MELSEC Series CVSS 3.1CRITICAL 9.1
- TI-2023-01345 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module CVSS 3.1CRITICAL 10.0
- TI-2023-06346 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CVSS 3.1CRITICAL 9.8
- TI-2023-03131 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series CVSS 3.1CRITICAL 9.8
- TI-2021-03821 Memory corruption in Mitsubishi Electric Corporation CPU Module Logging Configuration Tool CVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-3511 · CVE Program
- CVE-2025-3511 · NVD
- FIRST EPSS
- GHSA-f46p-qr4h-m6p4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences