01 Record

CVE-2026-13584

Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol

HighPUBLISHEDCNA: Mitsubishi

CNA base score7.1 CVSS v4.0CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

View raw JSON

02 Description

Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.13% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 2.8% of scored records. A rank, not a probability.

NVD base score

7.1 (CVSS v4.0), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD analysis status

Deferred. NVD last modified this record on 2026-08-04.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-07-30 06:44Z1 MO AGO

Last updated

2026-08-04 03:56Z1 MO AGO

Reserved

2026-06-29

Assigning CNA

Mitsubishi

Record state

PUBLISHED

Severity

High (CVSS 7.1)

CNA CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

Weaknesses

CWE-924Improper Enforcement of Message Integrity During Transmission in a Communication ChannelBase

Data version

5.2

Document digest

299fb41358aecde86a7da1d96cffc90d6a6d85377c004185cb4d010dcda3c373

05 Affected products

VendorProductVersionsPlatforms

Mitsubishi Electric CorporationMELSEC MX Controller MX-R model MXR300-16all versions—

Mitsubishi Electric CorporationMELSEC MX Controller MX-R model MXR300-32all versions—

Mitsubishi Electric CorporationMELSEC MX Controller MX-R model MXR300-64all versions—

Mitsubishi Electric CorporationMELSEC MX Controller MX-R model MXR500-128all versions—

Mitsubishi Electric CorporationMELSEC MX Controller MX-R model MXR500-256all versions—

Mitsubishi Electric CorporationMELSEC MX Controller MX-F model MXF100-8-N32all versions—

Mitsubishi Electric CorporationMELSEC MX Controller MX-F model MXF100-8-P32all versions—

Mitsubishi Electric CorporationMELSEC MX Controller MX-F model MXF100-16-N32all versions—

Mitsubishi Electric CorporationMELSEC MX Controller MX-F model MXF100-16-P32all versions—

Mitsubishi Electric CorporationMaster/local module RJ71GN11-T2all versions—

Mitsubishi Electric CorporationMaster/local module RJ71GN11-SXall versions—

Mitsubishi Electric CorporationMaster/local module RJ71GN11-EIPall versions—

Mitsubishi Electric CorporationMaster/local module FX5-CCLGN-MSall versions—

Mitsubishi Electric CorporationCC-Link IE TSN interface board NZ81GN11-SXall versions—

Mitsubishi Electric CorporationCC-Link IE TSN interface board NZ81GN11-T2all versions—

Mitsubishi Electric CorporationMotion module RD78G4all versions—

Mitsubishi Electric CorporationMotion module RD78G8all versions—

Mitsubishi Electric CorporationMotion module RD78G16all versions—

Mitsubishi Electric CorporationMotion module RD78G64all versions—

Mitsubishi Electric CorporationMotion module RD78GHVall versions—

Mitsubishi Electric CorporationMotion module RD78GHWall versions—

Mitsubishi Electric CorporationMotion module FX5-40SSC-Gall versions—

Mitsubishi Electric CorporationMotion module FX5-80SSC-Gall versions—

Mitsubishi Electric CorporationMotion Control Board MR-EM441Gall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2S1-32Dall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2S1-32Tall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2S1-32TEall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2S1-32DTall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2S1-32DTEall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2B1-32Dall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2B1-32Tall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2B1-32TEall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2B1-32DTall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2B1-32DTEall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GNCF1-32Dall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GNCF1-32Tall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GNCE3-32Dall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GNCE3-32DTall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN12A4-16Dall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN12A4-16DEall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN12A2-16Tall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN12A2-16TEall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN12A42-16DTall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN12A42-16DTEall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2S1-16Dall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2S1-16Tall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2S1-16TEall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2B1-16Dall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2B1-16Tall versions—

Mitsubishi Electric CorporationBlock-type remote module NZ2GN2B1-16TEall versions—

Mitsubishi Electric CorporationBlock-type remote module with safety functions NZ2GNSS2-8Dall versions—

Mitsubishi Electric CorporationBlock-type remote module with safety functions NZ2GNSS2-8D-Kall versions—

Mitsubishi Electric CorporationBlock-type remote module with safety functions NZ2GNSS2-8TEall versions—

Mitsubishi Electric CorporationBlock-type remote module with safety functions NZ2GNSS2-8TE-Kall versions—

Mitsubishi Electric CorporationBlock-type remote module with safety functions NZ2GNSS2-16DTEall versions—

Mitsubishi Electric CorporationBlock-type remote module with safety functions NZ2GNSS2-16DTE-Kall versions—

Mitsubishi Electric CorporationBlock-type remote module with safety functions NZ2GNS12A2-14DTall versions—

Mitsubishi Electric CorporationBlock-type remote module with safety functions NZ2GNS12A2-16DTEall versions—

Mitsubishi Electric CorporationAnalog-Digital converter module NZ2GN2S-60AD4all versions—

Mitsubishi Electric CorporationAnalog-Digital converter module NZ2GN2B-60AD4all versions—

55 further entries not shown. The complete list is in the raw JSON document.

06 References

www.mitsubishielectric.comhttps://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-005_en.pdfvendor-advisory
jvn.jphttps://jvn.jp/vu/JVNVU98879231/government-resource
www.cisa.govhttps://www.cisa.gov/news-events/ics-advisories/icsa-26-211-07government-resource

01 Record index

CVE-2026-13584

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-13584

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References