High severity · published Jul 30, 2026
CVE-2026-13584
Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol
7.1
CVSS
0.2%
EPSS
No
On KEV
Description
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, MELSEC iQ-L Series Motion Module, Motion Control Board, Block-type remote module, Block-type remote module with safety functions, Analog-Digital converter module, Digital-Analog converter module, CC-Link IE TSN compatible coupler, FPGA module, Tension meter, AC Servo MELSERVO-J5, AC Servo MELSERVO-JET, Liner Track System MTR-S series Linear track control module, Inverter FR-A800/F800/E800 Series, Industrial Robot CR800-D series controller Network Base Card, CC-Link IE TSN expansion unit, CC-Link IE TSN-CC-Link IE Field Network bridge module, CC-Link IE TSN-AnyWireASLINK bridge module, Energy Measuring Unit CC-Link IE TSN Communication Unit, GOT3000 Series, CC-Link IE TSN Communication Unit, Motion Control Software, CC-Link IE TSN Communication Software for Windows, Analysis Support Software MELSOFT VIMA, Master/Local module Designated communication LSI DeviceKit, Remote Station Communication LSI with GbE-PHY, CC-Link IE TSN Master/Local module Designated communication LSI SDK, and Remote station software development kit allows an attacker with access to a CC-Link IE TSN network to tamper with communication data (control input/output values) by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BR
Block-type remote module NZ2GN12A2-16T · Mitsubishi Electric Corporation
all versions · source: vendor
BR
Block-type remote module NZ2GN12A2-16TE · Mitsubishi Electric Corporation
all versions · source: vendor
BR
Block-type remote module NZ2GN12A4-16D · Mitsubishi Electric Corporation
all versions · source: vendor
BR
Block-type remote module NZ2GN12A4-16DE · Mitsubishi Electric Corporation
all versions · source: vendor
BR
Block-type remote module NZ2GN12A42-16DT · Mitsubishi Electric Corporation
all versions · source: vendor
BR
Block-type remote module NZ2GN12A42-16DTE · Mitsubishi Electric Corporation
all versions · source: vendor
BR
Block-type remote module NZ2GN2B1-16D · Mitsubishi Electric Corporation
all versions · source: vendor
BR
Block-type remote module NZ2GN2B1-16T · Mitsubishi Electric Corporation
all versions · source: vendor
BR
Block-type remote module NZ2GN2B1-16TE · Mitsubishi Electric Corporation
all versions · source: vendor
BR
Block-type remote module NZ2GN2B1-32D · Mitsubishi Electric Corporation
all versions · source: vendor
BR
Block-type remote module NZ2GN2B1-32DT · Mitsubishi Electric Corporation
all versions · source: vendor
BR
Block-type remote module NZ2GN2B1-32DTE · Mitsubishi Electric Corporation
all versions · source: vendor
In the news
VulnerabilityHigh
Mitsubishi Electric CC-Link IE TSN Communication Protocol
View CSAF
Summary
Successful exploitation of this vulnerability could allow an attacker with access to the same network segment to tamper with communication data in the affected product by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly.
The following versions of Mitsubishi Electric CC-Link IE TSN Communication Protocol are affected:
Mitsubishi Electric MELSEC MX Controller MX-R model MXR300-16 vers:all/* (CVE-2026-13584)
Mitsubishi Electric MELSEC MX Controller MX-R model MXR300-32 vers:all/* (CVE-2026-13584)
Mitsubishi Electric MELSEC MX Controller MX-R model MXR300-64 vers:all/* (CVE-2026-13584)
Mitsubishi Electric MELSEC MX Controller MX-R model MXR500-128 vers:all/* (CVE-2026-13584)
Mitsubishi Electric MELSEC MX Controller MX-R model MXR500-256 vers:all/* (CVE-2026-13584)
Mitsubishi Electric MELSEC MX Controller MX-F model MXF100-8-N32 vers:all/* (CVE-2026-13584)
Mitsubishi Electric MELSEC MX Controller MX-F model MXF100-8-P32 vers:all/* (CVE-2026-13584)
Mitsubishi Electric MELSEC MX Controller MX-F model MXF100-16-N32 vers:all/* (CVE-2026-13584)
Mitsubishi Electric MELSEC MX Controller MX-F model MXF100-16-P32 vers:all/* (CVE-2026-13584)
Mitsubishi Electric Master/local module RJ71GN11-T2 vers:all/* (CVE-2026-13584)
Mitsubishi Electric Master/...
Jul 30, 2026·CISA Advisories
Affected product
BR
Block-type remote module NZ2GN12A2-16T
Mitsubishi Electric Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-13584
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-13584
jvn.jp
https://jvn.jp/vu/JVNVU98879231/
www.cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-07
www.mitsubishielectric.com
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-005_en.pdf
