CVE-2026-13584: CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel in Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-16
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, Motion Control Board, Block-type remote module, Block-type remote module with safety functions, Analog-Digital converter module, Digital-Analog converter module, CC-Link IE TSN compatible coupler, FPGA module, Tension meter, AC Servo MELSERVO-J5, AC Servo MELSERVO-JET, Liner Track System MTR-S series Linear track control module, Inverter FR-A800/F800/E800 Series, Industrial Robot CR800-D series controller Network Base Card, CC-Link IE TSN expansion unit, CC-Link IE TSN-CC-Link IE Field Network bridge module, CC-Link IE TSN-AnyWireASLINK bridge module, Energy Measuring Unit CC-Link IE TSN Communication Unit, Industrial Computer MELIPC series, GOT3000 Series, CC-Link IE TSN Communication Unit, Motion Control Software, CC-Link IE TSN Communication Software for Windows, Analysis Support Software MELSOFT VIMA, Master/Local module Designated communication LSI DeviceKit, Master/Local module Designated communication LSI, Remote Station Communication LSI with GbE-PHY, CC-Link IE TSN Master/Local module Designated communication LSI SDK, and Remote station software development kit allows an attacker with access to a CC-Link IE TSN network to tamper with communication data (control input/output values) by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly.
AI Analysis
Technical Summary
This vulnerability (CVE-2026-13584) involves improper enforcement of message integrity during transmission over a communication channel in Mitsubishi Electric Corporation's MELSEC MX Controller MX-R model MXR300-16 and numerous related products. An attacker with access to the CC-Link IE TSN network can send specially crafted packets timed precisely to tamper with control input/output data. This manipulation can disrupt the control functions of the affected devices, potentially causing denial-of-service or incorrect operational behavior. The issue affects a wide range of Mitsubishi industrial automation hardware and software components. No official fix or patch has been documented as of the published date.
Potential Impact
An attacker with network access to the CC-Link IE TSN communication channel can tamper with control data, causing denial-of-service conditions or incorrect operation of critical industrial control devices. This can disrupt industrial processes relying on these Mitsubishi Electric products, potentially leading to operational downtime or safety risks. The vulnerability does not require privileges or user interaction but does require network access to the specific industrial communication network.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict and monitor access to the CC-Link IE TSN network to prevent unauthorized packet injection. Network segmentation and access controls should be enforced to limit exposure. Follow Mitsubishi Electric Corporation's advisories for updates and apply patches promptly when released.
CVE-2026-13584: CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel in Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-16
Description
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, Motion Control Board, Block-type remote module, Block-type remote module with safety functions, Analog-Digital converter module, Digital-Analog converter module, CC-Link IE TSN compatible coupler, FPGA module, Tension meter, AC Servo MELSERVO-J5, AC Servo MELSERVO-JET, Liner Track System MTR-S series Linear track control module, Inverter FR-A800/F800/E800 Series, Industrial Robot CR800-D series controller Network Base Card, CC-Link IE TSN expansion unit, CC-Link IE TSN-CC-Link IE Field Network bridge module, CC-Link IE TSN-AnyWireASLINK bridge module, Energy Measuring Unit CC-Link IE TSN Communication Unit, Industrial Computer MELIPC series, GOT3000 Series, CC-Link IE TSN Communication Unit, Motion Control Software, CC-Link IE TSN Communication Software for Windows, Analysis Support Software MELSOFT VIMA, Master/Local module Designated communication LSI DeviceKit, Master/Local module Designated communication LSI, Remote Station Communication LSI with GbE-PHY, CC-Link IE TSN Master/Local module Designated communication LSI SDK, and Remote station software development kit allows an attacker with access to a CC-Link IE TSN network to tamper with communication data (control input/output values) by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly.
CVSS v4.0
Score 7.1high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-13584) involves improper enforcement of message integrity during transmission over a communication channel in Mitsubishi Electric Corporation's MELSEC MX Controller MX-R model MXR300-16 and numerous related products. An attacker with access to the CC-Link IE TSN network can send specially crafted packets timed precisely to tamper with control input/output data. This manipulation can disrupt the control functions of the affected devices, potentially causing denial-of-service or incorrect operational behavior. The issue affects a wide range of Mitsubishi industrial automation hardware and software components. No official fix or patch has been documented as of the published date.
Potential Impact
An attacker with network access to the CC-Link IE TSN communication channel can tamper with control data, causing denial-of-service conditions or incorrect operation of critical industrial control devices. This can disrupt industrial processes relying on these Mitsubishi Electric products, potentially leading to operational downtime or safety risks. The vulnerability does not require privileges or user interaction but does require network access to the specific industrial communication network.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict and monitor access to the CC-Link IE TSN network to prevent unauthorized packet injection. Network segmentation and access controls should be enforced to limit exposure. Follow Mitsubishi Electric Corporation's advisories for updates and apply patches promptly when released.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Mitsubishi
- Date Reserved
- 2026-06-29T00:29:37.578Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a6afbbf9c2644c7f8b72331
Added to database: 07/30/2026, 07:22:39 UTC
Last enriched: 07/30/2026, 07:41:04 UTC
Last updated: 07/31/2026, 02:51:54 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.