CVE-2026-13584: Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol
Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR300-16
Vendor fix available · Affected: Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-16 · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 8% of scored CVEs
DescriptionCVE.org
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, MELSEC iQ-L Series Motion Module, Motion Control Board, Block-type remote module, Block-type remote module with safety functions, Analog-Digital converter module, Digital-Analog converter module, CC-Link IE TSN compatible coupler, FPGA module, Tension meter, AC Servo MELSERVO-J5, AC Servo MELSERVO-JET, Liner Track System MTR-S series Linear track control module, Inverter FR-A800/F800/E800/D800 Series, Industrial Robot CR800-D series controller Network Base Card, CC-Link IE TSN expansion unit, CC-Link IE TSN-CC-Link IE Field Network bridge module, CC-Link IE TSN-AnyWireASLINK bridge module, Energy Measuring Unit CC-Link IE TSN Communication Unit, GOT3000 Series, CC-Link IE TSN Communication Unit, Motion Control Software, CC-Link IE TSN Communication Software for Windows, Analysis Support Software MELSOFT VIMA, Master/Local module Designated communication LSI DeviceKit, Remote Station Communication LSI with GbE-PHY, CC-Link IE TSN Master/Local module Designated communication LSI SDK, and Remote station software development kit allows an attacker with access to a CC-Link IE TSN network to tamper with communication data (control input/output values) by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly.
Affected products20
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR300-16all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR300-32all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR300-64all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR500-128all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR500-256all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100-8-N32all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100-8-P32all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100-16-N32all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100-16-P32all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100S-N32all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100S-P32all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100S-8-N32all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100S-8-P32all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100S-16-N32all versions
- Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100S-16-P32all versions
- Mitsubishi Electric Corporation · Master/local module RJ71GN11-T2all versions
- Mitsubishi Electric Corporation · Master/local module RJ71GN11-SXall versions
- Mitsubishi Electric Corporation · Master/local module RJ71GN11-EIPall versions
- Mitsubishi Electric Corporation · Master/local module FX5-CCLGN-MSall versions
- Mitsubishi Electric Corporation · CC-Link IE TSN interface board NZ81GN11-SXall versions
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Published
- July 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-13584 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.