CVE-2025-3511Suited to automated attack · CISA

Vulnerability in Mitsubishi Electric Corporation CC Link IE TSN Remote I/O Module NZ2GN2S1 32D

CVSS score

7.5

EPSS probability

%0.9

Risk score

0.1

Published

1 y ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-3511 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-3511 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

ID	VENDOR	PRODUCT	ACTION
1	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32D	View
2	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32T	View
3	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE	View
4	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT	View
5	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE	View
6	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32D	View
7	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32T	View
8	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE	View
9	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT	View
10	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE	View
11	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCF1-32D	View
12	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCF1-32T	View
13	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCE3-32D	View
14	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT	View
15	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A4-16D	View
16	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE	View
17	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A2-16T	View
18	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE	View
19	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT	View
20	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE	View
21	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-16D	View
22	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-16T	View
23	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE	View
24	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-16D	View
25	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-16T	View
26	Mitsubishi Electric Corporation	CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE	View
27	Mitsubishi Electric Corporation	CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4	View
28	Mitsubishi Electric Corporation	CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4	View
29	Mitsubishi Electric Corporation	CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4	View
30	Mitsubishi Electric Corporation	CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4	View
31	Mitsubishi Electric Corporation	CC-Link IE TSN FPGA module NZ2GN2S-D41P01	View
32	Mitsubishi Electric Corporation	CC-Link IE TSN FPGA module NZ2GN2S-D41D01	View
33	Mitsubishi Electric Corporation	CC-Link IE TSN FPGA module NZ2GN2S-D41PD02	View
34	Mitsubishi Electric Corporation	CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300	View
35	Mitsubishi Electric Corporation	CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60	View
36	Mitsubishi Electric Corporation	MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2	View
37	Mitsubishi Electric Corporation	MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP	View
38	Mitsubishi Electric Corporation	MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX	View
39	Mitsubishi Electric Corporation	MELSEC iQ-R Series Ethernet Interface Module RJ71EN71	View
40	Mitsubishi Electric Corporation	CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2GACP610-60	View
41	Mitsubishi Electric Corporation	CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2KT-NPETNG51	View
42	Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS	View
43	Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET	View
44	Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP	View
45	Mitsubishi Electric Corporation	MELSEC iQ-R Series CPU module R04ENCPU (Network part)	View
46	Mitsubishi Electric Corporation	MELSEC iQ-R Series CPU module R08ENCPU (Network part)	View
47	Mitsubishi Electric Corporation	MELSEC iQ-R Series CPU module R16ENCPU (Network part)	View
48	Mitsubishi Electric Corporation	MELSEC iQ-R Series CPU module R32ENCPU (Network part)	View
49	Mitsubishi Electric Corporation	MELSEC iQ-R Series CPU module R120ENCPU (Network part)	View

Total affected vendors: 1|Products: 49

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCORE	VERSION	SEVERITY	VECTOR	SOURCE
7.5	CVSS V3_1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CVE CNA
7.5	CVSS V31	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	NVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.

Restrict access to internet-facing services and apply network segmentation.

Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.

Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-3511 is associated with the following CWEs:

CWE-1284: Common Weakness Enumeration Entry CWE-1284

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-3511 weaknesses.

CAPEC-66: SQL Injection CAPEC-126: Path Traversal CAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden

PermissionsGerekmiyor

UserGerekmiyor

Official Sources and Advisories

https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdfvendor-advisory https://jvn.jp/vu/JVNVU96620683/vendor-advisory https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03vendor-advisory

CVSS Vector Radar Chart

7.5 / 10

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone required

User InteractionNone required

Confidentiality (Gizlilik)Low

Integrity (Bütünlük)None

Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

Mitsubishi Electric Corporation

Weakness Type (CWE & CAPEC)

CWE-1284

Similar Vulnerabilities

5.9

CVE-2025-2399

Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series

VendorMitsubishi Electric CorporationProductMitsubishi Electric CNC M800V Series M800VW+17 etkilenen

Patch status unknownEPSS %17 mo ago

7.1

CVE-2026-13584

Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol

VendorMitsubishi Electric CorporationProductMELSEC MX Controller MX-R model MXR300-16+24 etkilenen

Patch status unknownEPSS %02 mo ago

9.2

CVE-2026-15688

Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting

VendorMitsubishi Electric CorporationProductGX Works3+1 etkilenen

Patch status unknownEPSS %025 d ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2025-3511"