VulnerabilitiesAug 27, 2026

Mitsubishi Electric Multiple FA Products (Update D)

Mitsubishi Electric FA products vulnerable to DoS via crafted UDP packets.

Vendor Watch

Run Mitsubishi Electric?

Get an email when a reviewed story names Mitsubishi Electric, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works Privacy

Summary

A denial-of-service vulnerability (CVE-2025-3511) has been identified in multiple Mitsubishi Electric FA products. Exploitation could allow a remote attacker to cause a DoS condition, timeout error, or communication delay by sending a specially crafted UDP packet. Affected products include various CC-Link IE TSN modules and communication LSIs. Mitsubishi Electric has released updated versions and recommends network segmentation and firewalling as mitigations.

The lesson from this incident

Full lesson

A denial-of-service vulnerability (CVE-2025-3511) in multiple Mitsubishi Electric Factory Automation products allows a remote attacker to disrupt operations by sending a specially crafted UDP packet, potentially causing communication delays, timeout errors, or full DoS conditions. Operational Technology (OT) environments are particularly at risk because these systems often prioritize availability and uptime, making unpatched vulnerabilities especially dangerous. The fact that exploitation requires no authentication and leverages a common protocol (UDP) significantly lowers the barrier for attackers. This matters because disruption of CC-Link IE TSN modules in industrial environments can halt production lines, cause safety incidents, or create cascading failures across interconnected systems.

What helps against this

How we list vendors

Automated patch management
Known holes get closed in days, not months.
For exampleMicrosoft Intune ManageEngine Patch Manager Plus Action1 Patch Management all options
Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
For exampleIllumio Segmentation ThreatLocker Zero Trust Endpoint Firewall Akamai Guardicore Segmentation all options
Next-generation firewall and intrusion prevention
Malicious traffic is blocked at the network edge and between zones.
For exampleCheck Point Quantum Force firewalls Palo Alto Networks Next-Generation Firewalls Cisco Secure Firewall all options

Indicators of Compromise

cve — CVE-2025-3511

Entities

Mitsubishi Electric (vendor)CC-Link IE TSN Remote I/O module NZ2GN2S1-32D (product)MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2 (product)MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET (product)CC-Link IE TSN (technology)