CVE-2025-3511Active Exploitation

MEDIUMCVSS 7.5 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, and MELSEC iQ-R Series CPU module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.

Back to dashboard

5.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-1284

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

Active exploitation appears in 1 classified signals
Exploit tooling references are present in monitored signal
1 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Exploit tool or code specified in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Active Exploitation

1100.0%

Referenced assets1 URL

By indicator

https://aviatrix.ai/threat-research-center/mitsubishi-electric-fa-products-cve-2025-3511-dos-vulnerability

Full discourse1 post

Aviatrix Threat Research Center@aviatrixtrc46d
Active Exploitation
TRC analysis shows attackers exploiting CVE-2025-3511 send crafted UDP packets to Mitsubishi Electric industrial controllers, causing denial-of-service conditions without authentication. The vulnerability affects 45+ factory automation products, requiring manual resets for recovery. #IndustrialSecurity :link: Full breakdown: https://aviatrix.ai/threat-research-center/mitsubishi-electric-fa-products-cve-2025-3511-dos-vulnerability
Post summary
TRC analysis reports attackers actively exploiting CVE‑2025‑3511 against Mitsubishi Electric controllers via crafted UDP packets, causing denial‑of‑service that requires manual resets. No patch or PoC link is included.
0000048
2.0K followersView on X

Explore more

Back to dashboard