Mitsubishi Electric Multiple FA Products (Update D)
CISA warns Mitsubishi Electric CC-Link IE TSN remote I/O modules are vulnerable to denial-of-service via crafted UDP packets (CVE-2025-3511).
CISA published Update D of advisory ICSA-25-128-03 covering Mitsubishi Electric factory automation products. Affected products include CC-Link IE TSN Remote I/O modules NZ2GN2S1-32D, NZ2GN2S1-32T, NZ2GN2S1-32TE, and NZ2GN2S1-32DT at firmware version 09 or earlier (CVE-2025-3511). A remote attacker can send a specially crafted UDP packet to cause denial-of-service conditions, timeout errors, or communication delays on the affected products.
- CVE-2025-3511 enables DoS, timeouts, or delays via crafted UDP packets
- Affected: CC-Link IE TSN remote I/O modules NZ2GN2S1-32D/-32T/-32TE/-32DT at firmware 09 or earlier
- Update D refreshes the affected-product listing in advisory ICSA-25-128-03
- CVEs
- CVE-2025-3511
- Vendors
- Mitsubishi Electric
- Products
- CC-Link IE TSN Remote I/O module
- Organizations
- CISA
- Countries
- Japan
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-3511 | Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN… | 7.5 | <1% |
From the original article
View CSAF Summary Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition, a timeout error, or a communication delay by sending a specially crafted UDP packet to the product.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.