IM
IronMonkey Threat Research
‹ Back to ICS Advisories

Mitsubishi Electric Multiple FA Products (Update D)

HIGH
CVSS 7.5
Date 2026-08-27T06:00:00+00:00
Source cisa-csaf
Published by CISA

// Description

Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition, a timeout error, or a communication delay by sending a specially crafted UDP packet to the product.

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2025-3511 7.5 high
A denial-of-service (DoS) vulnerability due to Improper Validation of Specified Quantity in Input (CWE-1284) exists in the Ethernet function of multiple FA products. This vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted UDP packet if CC-Link IE TSN Remote I/O modules NZ2GN2S1-32D, NZ2GN2S1-32T, NZ2GN2S1-32TE, NZ2GN2S1-32DT, NZ2GN2S1-32DTE, NZ2GN2B1-32D, NZ2GN2B1-32T, NZ2GN2B1-32TE, NZ2GN2B1-32DT, NZ2GN2B1-32DTE, NZ2GNCF1-32D, NZ2GNCF1-32T, NZ2GNCE3-32D, NZ2GNCE3-32DT, NZ2GN12A4-16D, NZ2GN12A4-16DE, NZ2GN12A2-16T, NZ2GN12A2-16TE, NZ2GN12A42-16DT, NZ2GN12A42-16DTE, NZ2GN2S1-16D, NZ2GN2S1-16T, NZ2GN2S1-16TE, NZ2GN2B1-16D, NZ2GN2B1-16T, NZ2GN2B1-16TE, CC-Link IE TSN Analog-Digital Converter modules NZ2GN2S-60AD4, NZ2GN2B-60AD4, CC-Link IE TSN Digital-Analog Converter modules NZ2GN2S-60DA4 and NZ2GN2B-60DA4, CC-Link IE TSN FPGA modules NZ2GN2S-D41P01, NZ2GN2S-D41D01, NZ2GN2S-D41PD02, CC-Link IE TSN Remote Station Communication LSIs CP620 with GbE-PHY NZ2GACP620-300, and NZ2GACP620-60 does not receive a valid UDP packet within 3 seconds. This vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition on MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2, RJ71GN11-EIP, RJ71GN11-SX, MELSEC iQ-R Series Ethernet Interface Module RJ71EN71, CC-Link IE TSN master/local Station Communication LSIs CP610 NZ2GACP610-60, NZ2KT-NPETNG51, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS, MELSEC iQ-R Series CPU module R04ENCPU (Network part), R08ENCPU (Network part), R16ENCPU (Network part), R32ENCPU (Network part), and R120ENCPU (Network part), by sending a specially crafted UDP packet. Or this vulnerability could allow a remote attacker to cause a communication delay in Simple CPU communication on MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET and FX5-ENET/IP Ethernet Module FX5-ENET/IP, by sending a specially crafted UDP packet. A system reset of the product is required for recovery in all cases above. Additionally, this vulnerability could allow a remote attacker to cause a timeout error in CC-Link IEF Basic communication on MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET and FX5-ENET/IP Ethernet Module FX5-ENET/IP, by sending a specially crafted UDP packet. Even if a timeout error occurs, communication will be restored once the affected product starts receiving valid UDP packets.

// Remediations (47)

Patch: Mitsubishi Electric is releasing fixed version 13 or later for MELSEC iQ-R Series CC-Link IE TSN Ma
Mitsubishi Electric is releasing fixed version 13 or later for MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4: Versions 08 or later
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Remote I/O module NZ2GN2B1-16D: Versions 10 or later
Mitigation: For customers of the affected products, Mitsubishi Electric recommends using within a LAN and blocki
For customers of the affected products, Mitsubishi Electric recommends using within a LAN and blocking access from untrusted networks and hosts through firewalls, to minimize the risk of exploiting this vulnerability.
Patch: Mitsubishi Electric is releasing fixed version 1.107 or later for MELSEC iQ-F Series FX5-ENET/IP Eth
Mitsubishi Electric is releasing fixed version 1.107 or later for MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Mitsubishi Electric is releasing fixed version 08 or later for CC-Link IE TSN Digital-Analog Convert
Mitsubishi Electric is releasing fixed version 08 or later for CC-Link IE TSN Digital-Analog Converter modules NZ2GN2S-60DA4 and NZ2GN2B-60DA4. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT: Versions 10 or later
Patch: Mitsubishi Electric is releasing fixed version 08 or later for CC-Link IE TSN Analog-Digital Convert
Mitsubishi Electric is releasing fixed version 08 or later for CC-Link IE TSN Analog-Digital Converter modules NZ2GN2S-60AD4 and NZ2GN2B-60AD4. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN FPGA module NZ2GN2S-D41P01: Versions 02 or later
Patch: Mitsubishi Electric is releasing fixed network part firmware version 86 or later for MELSEC iQ-R Ser
Mitsubishi Electric is releasing fixed network part firmware version 86 or later for MELSEC iQ-R Series CPU module R04ENCPU (Network part), R08ENCPU (Network part), R16ENCPU (Network part), R32ENCPU (Network part), and R120ENCPU (Network part). Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: MELSEC iQ-
Please download and install the fixed version from the Mitsubishi Electric download site: MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2: Versions 28 or later
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Remote I/O module NZ2GN2S1-16D: Versions 10 or later
Patch: Mitsubishi Electric is releasing fixed version 10 or later for CC-Link IE TSN Remote I/O modules NZ2
Mitsubishi Electric is releasing fixed version 10 or later for CC-Link IE TSN Remote I/O modules NZ2GN2S1-32D, NZ2GN2S1-32T, NZ2GN2S1-32TE, NZ2GN2S1-32DT, NZ2GN2S1-32DTE, NZ2GN2B1-32D, NZ2GN2B1-32T, NZ2GN2B1-32TE, NZ2GN2B1-32DT, NZ2GN2B1-32DTE, NZ2GNCF1-32D, NZ2GNCF1-32T, NZ2GNCE3-32D, NZ2GNCE3-32DT, NZ2GN12A4-16D, NZ2GN12A4-16DE, NZ2GN12A2-16T, NZ2GN12A2-16TE, NZ2GN12A42-16DT, NZ2GN12A42-16DTE, NZ2GN2S1-16D, NZ2GN2S1-16T, NZ2GN2S1-16TE, NZ2GN2B1-16D, NZ2GN2B1-16T, and NZ2GN2B1-16TE. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf."
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: MELSEC iQ-
Please download and install the fixed version from the Mitsubishi Electric download site: MELSEC iQ-R Series Ethernet Interface Module RJ71EN71: Versions 86 or later
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60: Versions 1.09K or later
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300: Versions 1.09K or later
Patch: Mitsubishi Electric is releasing fixed version 86 or later for MELSEC iQ-R Series Ethernet Interface
Mitsubishi Electric is releasing fixed version 86 or later for MELSEC iQ-R Series Ethernet Interface Module RJ71EN71. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Mitsubishi Electric is releasing fixed version 06 or later for CC-Link IE TSN master/local Station C
Mitsubishi Electric is releasing fixed version 06 or later for CC-Link IE TSN master/local Station Communication LSIs CP610 NZ2GACP610-60 and NZ2KT-NPETNG51. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: MELSEC iQ-
Please download and install the fixed version from the Mitsubishi Electric download site: MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX: Versions 07 or later
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN FPGA module NZ2GN2S-D41D01: Versions 02 or later
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Remote I/O module NZ2GN2S1-16T: Versions 10 or later
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN master/local Station Communication LSI CP610 NZ2GACP610-60: Versions 06 or later
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE: Versions 10 or later
Mitigation: For more information, see Mitsubishi Electric advisory 2025-001 https://www.mitsubishielectric.com/p
For more information, see Mitsubishi Electric advisory 2025-001 https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf.
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: MELSEC iQ-
Please download and install the fixed version from the Mitsubishi Electric download site: MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP: Versions 13 or later
Mitigation: For customers of the affected products, Mitsubishi Electric recommends installing anti-virus softwar
For customers of the affected products, Mitsubishi Electric recommends installing anti-virus software on your PC that can access the affected product, to minimize the risk of exploiting this vulnerability.
Patch: Mitsubishi Electric is releasing fixed version 02 or later for CC-Link IE TSN FPGA modules NZ2GN2S-D
Mitsubishi Electric is releasing fixed version 02 or later for CC-Link IE TSN FPGA modules NZ2GN2S-D41P01, NZ2GN2S-D41D01, and NZ2GN2S-D41PD02. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Mitsubishi Electric is releasing fixed version 28 or later for MELSEC iQ-R Series CC-Link IE TSN Mas
Mitsubishi Electric is releasing fixed version 28 or later for MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4: Versions 08 or later
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4: Versions 08 or later
Patch: Mitsubishi Electric is releasing fixed version 07 or later for MELSEC iQ-R Series CC-Link IE TSN Mas
Mitsubishi Electric is releasing fixed version 07 or later for MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitigation: Install anti-virus software on your PC that can access the product.
Install anti-virus software on your PC that can access the product.
Mitigation: Restrict physical access to the affected products and the LAN to which they are connected.
Restrict physical access to the affected products and the LAN to which they are connected.
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE: Versions 10 or later
Patch: Mitsubishi Electric is releasing fixed version 1.210 or later for MELSEC iQ-F Series FX5 Ethernet Mo
Mitsubishi Electric is releasing fixed version 1.210 or later for MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Mitsubishi Electric is releasing fixed version 1.09K or later for CC-Link IE TSN Remote Station Comm
Mitsubishi Electric is releasing fixed version 1.09K or later for CC-Link IE TSN Remote Station Communication LSIs CP620 with GbE-PHY NZ2GACP620-300 or NZ2GACP620-60. Please download the CP620 sample code from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE: Versions 10 or later
Mitigation: Use within a LAN and block access from untrusted networks and hosts through firewalls.
Use within a LAN and block access from untrusted networks and hosts through firewalls.
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN FPGA module NZ2GN2S-D41PD02: Versions 02 or later
Patch: Mitsubishi Electric is releasing fixed version 1.030 or later for MELSEC iQ-F Series FX5 CC-Link IE
Mitsubishi Electric is releasing fixed version 1.030 or later for MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN master/local Station Communication LSI CP610 NZ2KT-NPETNG51: Versions 06 or later
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4: Versions 08 or later
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: Please dow
Please download and install the fixed version from the Mitsubishi Electric download site: Please download and install the fixed version from the Mitsubishi Electric download site: MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET: Versions 1.210 or later
Mitigation: Use a firewall, virtual private network (VPN), etc. to prevent unauthorized access when Internet acc
Use a firewall, virtual private network (VPN), etc. to prevent unauthorized access when Internet access is required.
Patch: Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE
Please download and install the fixed version from the Mitsubishi Electric download site: CC-Link IE TSN Remote I/O module NZ2GN2B1-16T: Versions 10 or later
Mitigation: For customers of the affected products, Mitsubishi Electric recommends restricting physical access t
For customers of the affected products, Mitsubishi Electric recommends restricting physical access to the products and the LAN to which they are connected, to minimize the risk of exploiting this vulnerability.
Mitigation: For customers of the affected products, Mitsubishi Electric recommends using a firewall, virtual pri
For customers of the affected products, Mitsubishi Electric recommends using a firewall, virtual private network (VPN), etc. to prevent unauthorized access when internet access is required, to minimize the risk of exploiting this vulnerability.

// References