Home / Items
Industrial control advisorySeverity 7.5 high
Mitsubishi Electric Multiple FA Products (Update D)
ICSA-25-128-03 · CISA · April 25, 2025
Summary
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition, a timeout error, or a communication delay by sending a specially crafted UDP packet to the product.
From CISA, quoted as published. Check the source before acting.
What to do
Mitsubishi Electric is releasing fixed version 10 or later for CC-Link IE TSN Remote I/O modules NZ2GN2S1-32D, NZ2GN2S1-32T, NZ2GN2S1-32TE, NZ2GN2S1-32DT, NZ2GN2S1-32DTE, NZ2GN2B1-32D, NZ2GN2B1-32T, NZ2GN2B1-32TE, NZ2GN2B1-32DT, NZ2GN2B1-32DTE, NZ2GNCF1-32D, NZ2GNCF1-32T, NZ2GNCE3-32D, NZ2GNCE3-32DT, NZ2GN12A4-16D, NZ2GN12A4-16DE, NZ2GN12A2-16T, NZ2GN12A2-16TE, NZ2GN12A42-16DT, NZ2GN12A42-16DTE, NZ2GN2S1-16D, NZ2GN2S1-16T, NZ2GN2S1-16TE, NZ2GN2B1-16D, NZ2GN2B1-16T, and NZ2GN2B1-16TE. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf."
Mitsubishi Electric is releasing fixed version 08 or later for CC-Link IE TSN Analog-Digital Converter modules NZ2GN2S-60AD4 and NZ2GN2B-60AD4. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed version 08 or later for CC-Link IE TSN Digital-Analog Converter modules NZ2GN2S-60DA4 and NZ2GN2B-60DA4. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed version 02 or later for CC-Link IE TSN FPGA modules NZ2GN2S-D41P01, NZ2GN2S-D41D01, and NZ2GN2S-D41PD02. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed version 1.09K or later for CC-Link IE TSN Remote Station Communication LSIs CP620 with GbE-PHY NZ2GACP620-300 or NZ2GACP620-60. Please download the CP620 sample code from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed version 28 or later for MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed version 13 or later for MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed version 07 or later for MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed version 86 or later for MELSEC iQ-R Series Ethernet Interface Module RJ71EN71. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed version 06 or later for CC-Link IE TSN master/local Station Communication LSIs CP610 NZ2GACP610-60 and NZ2KT-NPETNG51. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed version 1.030 or later for MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed version 1.210 or later for MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed version 1.107 or later for MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP. Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
Mitsubishi Electric is releasing fixed network part firmware version 86 or later for MELSEC iQ-R Series CPU module R04ENCPU (Network part), R08ENCPU (Network part), R16ENCPU (Network part), R32ENCPU (Network part), and R120ENCPU (Network part). Please download the fixed update file from the link "https://www.mitsubishielectric.com/fa/download/index.html" and install it. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf".
For customers of the affected products, Mitsubishi Electric recommends using a firewall, virtual private network (VPN), etc. to prevent unauthorized access when internet access is required, to minimize the risk of exploiting this vulnerability.
For customers of the affected products, Mitsubishi Electric recommends using within a LAN and blocking access from untrusted networks and hosts through firewalls, to minimize the risk of exploiting this vulnerability.
For customers of the affected products, Mitsubishi Electric recommends restricting physical access to the products and the LAN to which they are connected, to minimize the risk of exploiting this vulnerability.
For customers of the affected products, Mitsubishi Electric recommends installing anti-virus software on your PC that can access the affected product, to minimize the risk of exploiting this vulnerability.
Vendor fix or mitigation, quoted from the advisory.
Each CVE in this advisory
| CVE | Severity | Known exploited | Exploit likelihood |
|---|---|---|---|
| CVE-2025-3511 | 7.5 high | No | 0.9% |
Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).
Affected products
| Vendor | Product |
|---|---|
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32D |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32T |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32D |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32T |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCF1-32D |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCF1-32T |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCE3-32D |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A4-16D |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A2-16T |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16D |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16T |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16D |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16T |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4 |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4 |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4 |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4 |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41P01 |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41D01 |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41PD02 |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300 |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60 |
| Mitsubishi Electric | Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2 |
| Mitsubishi Electric | Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP |
| Mitsubishi Electric | Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX |
| Mitsubishi Electric | Mitsubishi Electric MELSEC iQ-R Series Ethernet Interface Module RJ71EN71 |
| Mitsubishi Electric | Mitsubishi Electric CC-Link IE TSN master/local Station Communication LSI CP610 NZ2GACP610-60 |
9 more in the source.
Why it's on these mode pages
- Maritime: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)
- Pipeline: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)
- Freight rail: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)
- Passenger rail and transit: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)
- Highway and motor carrier: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)
- Postal and parcel: Vendor table: Mitsubishi Electric (industrial control makers used in every mode, all modes) (matched by rule)
Change history
- April 25, 2025: CISA Republication - Initial Republication
- April 25, 2025: Initial Publication
- October 9, 2025: RJ71GN11-T2, RJ71GN11-EIP, RJ71GN11-SX, RJ71EN71, NZ2GACP610-60, and NZ2KT-NPETNG51 have been added as affected products and fixed products, and the "remediations" was revised.
- October 9, 2025: CISA Republication - Update A - Update to Affected products, Impact, Countermeasures for Customers, Countermeasures for Products have been revised. The affected products RJ71GN11-T2, RJ71GN11-EIP, RJ71GN11-SX, RJ71EN71, NZ2GACP610-60 and NZ2KT-NPETNG51 have been added.
- February 3, 2026: CISA Republication - Update B - Update to Summary, Affected products, and Remediations have been revised. The affected products FX5-CCLGN-MS, FX5-ENET, and FX5-ENET/IP have been added.
- February 3, 2026: FX5-CCLGN-MS, AFX5-ENET, and AFX5-ENET/IP have been added as affected products and fixed products, and the "remediations" was revised.
- April 23, 2026: Added FX5-CCLGN-MS and FX5-ENET/IP have been added as fixed products, and the "remediations" was revised.
- April 30, 2026: CISA Republication - Update C - Added FX5-CCLGN-MS and FX5-ENET/IP that have been fixed to Countermeasures for Products. Affected products, Countermeasures for Customers, and Countermeasures for Products have been revised.
- August 27, 2026: R04ENCPU (Network Part), R08RNCPU (Network Part), R16ENCPU (Network Part), R32ENCPU (Network Part), and R12ENCPU (Network Part) have been added as affected products and fixed products, and the "remediations" was revised.
- August 27, 2026: CISA Republication update based on Mitsubishi Electric 2025-001 advisory
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com