CVE Intelligence
Skip to main content
HIGH

CVE-2026-13584

CVE-2026-13584 — Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, Motion Control Board, Block-type remote module, Block-type remote module with safety functions, Analog-Digital converter module, Digital-Analog converter module, CC-Link IE TSN compatible coupler, FPGA module, Tension meter, AC Servo MELSERVO-J5, AC Servo MELSERVO-JET, Liner Track System MTR-S series Linear track control module, Inverter FR-A800/F800/E800 Series, Industrial Robot CR800-D series controller Network Base Card, CC-Link IE TSN expansion unit, CC-Link IE TSN-CC-Link IE Field Network bridge module, CC-Link IE TSN-AnyWireASLINK bridge module, Energy Measuring Unit CC-Link IE TSN Communication Unit, Industrial Computer…

Published Updated Sources: cvelistV5, Mitsubishi

Triage

Is it exploited, how likely is exploitation, what does it touch, and how severe do the scoring sources call it.

Exploitation

Unreported

no source claims exploitation

EPSS

0%

chance of exploitation in 30 days

Affects

mitsubishi electric

115 products listed

CVSS base

7.1

HIGH

CISA SSVC assessment

Three decision points CISA publishes for the CVEs it assesses · SSVC 2.0.3. A stakeholder decision, not a severity score.

CISA

Exploitation

None

none · proof-of-concept · active

Automatable

No

can an attacker script all four kill-chain steps

Technical impact

Partial

partial · total control of the vulnerable component

Affected scope

The catalog records vendors and products as separate lists, not pairs, so which product belongs to which vendor is not something this page can say.

Products (115)

melsec mx controller mx r model mxr300 16melsec mx controller mx r model mxr300 32melsec mx controller mx r model mxr300 64melsec mx controller mx r model mxr500 128melsec mx controller mx r model mxr500 256melsec mx controller mx f model mxf100 8 n32melsec mx controller mx f model mxf100 8 p32melsec mx controller mx f model mxf100 16 n32melsec mx controller mx f model mxf100 16 p32master local module rj71gn11 t2master local module rj71gn11 sxmaster local module rj71gn11 eipmaster local module fx5 cclgn mscc link ie tsn interface board nz81gn11 sxcc link ie tsn interface board nz81gn11 t2motion module rd78g4motion module rd78g8motion module rd78g16motion module rd78g64motion module rd78ghvmotion module rd78ghwmotion module fx5 40ssc gmotion module fx5 80ssc gmotion control board mr em441gblock type remote module nz2gn2s1 32dblock type remote module nz2gn2s1 32tblock type remote module nz2gn2s1 32teblock type remote module nz2gn2s1 32dtblock type remote module nz2gn2s1 32dteblock type remote module nz2gn2b1 32dblock type remote module nz2gn2b1 32tblock type remote module nz2gn2b1 32teblock type remote module nz2gn2b1 32dtblock type remote module nz2gn2b1 32dteblock type remote module nz2gncf1 32dblock type remote module nz2gncf1 32tblock type remote module nz2gnce3 32dblock type remote module nz2gnce3 32dtblock type remote module nz2gn12a4 16dblock type remote module nz2gn12a4 16deblock type remote module nz2gn12a2 16tblock type remote module nz2gn12a2 16teblock type remote module nz2gn12a42 16dtblock type remote module nz2gn12a42 16dteblock type remote module nz2gn2s1 16dblock type remote module nz2gn2s1 16tblock type remote module nz2gn2s1 16teblock type remote module nz2gn2b1 16dblock type remote module nz2gn2b1 16tblock type remote module nz2gn2b1 16teblock type remote module with safety functions nz2gnss2 8dblock type remote module with safety functions nz2gnss2 8d kblock type remote module with safety functions nz2gnss2 8teblock type remote module with safety functions nz2gnss2 8te kblock type remote module with safety functions nz2gnss2 16dteblock type remote module with safety functions nz2gnss2 16dte kblock type remote module with safety functions nz2gns12a2 14dtblock type remote module with safety functions nz2gns12a2 16dteanalog digital converter module nz2gn2s 60ad4analog digital converter module nz2gn2b 60ad4digital analog converter module nz2gn2s 60da4digital analog converter module nz2gn2b 60da4cc link ie tsn compatible coupler nz2ft gnfpga module nz2gn2s d41p01fpga module nz2gn2s d41d01fpga module nz2gn2s d41pd02tension meter lm7 1lgtension meter lm7 2lgac servo melservo j5 mr j5 gac servo melservo j5 mr j5w gac servo melservo j5 mr j5 g hsac servo melservo j5 mr j5 g rjac servo melservo j5 mr j5 g llac servo melservo j5 mr j5d g4ac servo melservo j5 mr md333gac servo melservo jet mr jet gac servo melservo jet mr jet g4 hsinverter fr a800 f800 e800 series fr a8ncginverter fr a800 f800 e800 series fr a8ncg sinverter fr a800 f800 e800 series fr a800 gninverter fr a800 f800 e800 series fr e800 einverter fr a800 f800 e800 series fr e800 sceindustrial robot cr800 d series controller network base card 2f dq535 tsncc link ie tsn expansion unit fcu8 ex569cc link ie tsn cc link ie field network bridge module nz2gn gfbcc link ie tsn anywireaslink bridge module nz2aw1gnalenergy measuring unit cc link ie tsn communication unit emu4 cm tsnindustrial computer melipc series mi2532 windustrial computer melipc series mi2332 wgot3000 series gt3715 fhcbdgot3000 series gt3712 wxcbdgot3000 series gt3715 xrbagot3000 series gt3715 xrbdgot3000 series gt3712 xrbagot3000 series gt3712 xrbdgot3000 series gt3710 xrbagot3000 series gt3710 xrbdgot3000 series gt3708 xrbagot3000 series gt3708 xrbdcc link ie tsn communication unit gt25 j71gn13 t2motion control software swm gmotion control software swm g n1cc link ie tsn communication software for windows sw1dnd ccietct mmaster local module designated communication lsi devicekit nz2kt npetng51master local module designated communication lsi nz2gacp610 60remote station communication lsi with gbe phy nz2gacp620 60remote station communication lsi with gbe phy nz2gacp620 300remote station communication lsi with gbe phy nz2gacp621 90remote station communication lsi with gbe phy nz2gacp621 720cc link ie tsn master local module designated communication lsi sdk sw1dnn gn610src mremote station software development kit sw1dnc gnsdk1s mremote station software development kit sw1dnc gnsdk2s mliner track system mtr s series linear track control module mtr scu00 4gliner track system mtr s series linear track control module mtr scu00 pganalysis support software melsoft vima sw1dnn vima m

Every base score collected

Sources score independently and disagree; each row says who scored it and under which version.

ScoreVersionSeverityExpl.ImpactSource
7.1CVSS 4.0HIGH——cvelistV5

Weakness & attack patterns

  • CWE-924

Detection

Read off the CVSS vector and the weakness class. Starting points, not rules we have tested.

  • Search application, proxy, and WAF logs for requests touching /local, /F800/E800.

References

3 on the record

Elsewhere on this site

Not in any source we poll

Listed rather than left blank: an empty field and an unmeasured one look identical on screen, and only one is a reason to look elsewhere.

  • No confirmed IOCs, IP addresses, domains, file hashes, or malware artifacts supplied.
  • No organization-specific asset inventory, compensating-control status, or patch deployment evidence supplied.
  • No exploit packet captures, log samples, or incident case IDs supplied.