CVE-2026-13584

Control-data tampering via insufficient message integrity

Published Jul 30, 2026 · Updated Jul 30, 2026

Message-integrity failure in Mitsubishi Electric CC-Link IE TSN products allows adjacent attackers to alter control I/O data. The protocol accepts specially timed crafted packets without adequately enforcing message integrity, so receivers process attacker-altered control input/output values. Access to the same CC-Link IE TSN network is required; tampered values can disrupt control functions or make affected devices operate incorrectly.

CVSS severity7.1

High

EPSS probability0.13%

Next 30 days · Sep 16, 2026

Known exploitationUnconfirmed

Based on sourced intelligence

Hinoki checkNot available

Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

The record

CVE: CVE-2026-13584
Published: Jul 30, 2026
Updated: Jul 30, 2026

Vendor: Mitsubishi Electric Corporation
Product: NZ2GN12A4-16D
Classifications: CWE-924, T0831

Attack vector: adjacent
Privileges: unauthenticated

Timeline

How it unfolded

Jul 30, 2026CVE publishedPublication date reported by the CVE source.
Jul 30, 2026Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

Affected versionversion=all versions

What conditions does exploitation require?

Attack vectoradjacent

Required privilegesunauthenticated

What is affected?

Mitsubishi Electric Corporation · NZ2GN12A4-16Dversion=all versions

Mitsubishi Electric Corporation · Motion Control Board MR-EM441Gversion=all versions

Mitsubishi Electric Corporation · GOT3000 Series GT3712-WXCBDversion=all versions

Mitsubishi Electric Corporation · Energy Measuring Unit CC-Link IE TSN Communication Unit EMU4-CM-TSNversion=all versions

Mitsubishi Electric Corporation · Motion module RD78G64version=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2B1-32DTversion=all versions

Mitsubishi Electric Corporation · CC-Link IE TSN-AnyWireASLINK bridge module NZ2AW1GNALversion=all versions

Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100-8-P32version=all versions

Mitsubishi Electric Corporation · GOT3000 Series GT3710-XRBDversion=all versions

Mitsubishi Electric Corporation · GOT3000 Series GT3712-XRBDversion=all versions

Mitsubishi Electric Corporation · CC-Link IE TSN-CC-Link IE Field Network bridge module NZ2GN-GFBversion=all versions

Mitsubishi Electric Corporation · Inverter FR-A800/F800/E800 Series FR-E800-SCEversion=all versions

Mitsubishi Electric Corporation · FR-E800-Eversion=all versions

Mitsubishi Electric Corporation · GOT3000 Series GT3715-FHCBDversion=all versions

Mitsubishi Electric Corporation · NZ2GACP621-90version=all versions

Mitsubishi Electric Corporation · Block-type remote module with safety functions NZ2GNSS2-8D-Kversion=all versions

Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR500-256version=all versions

Mitsubishi Electric Corporation · MELSERVO-J5 MR-J5-G-RJversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN12A2-16TEversion=all versions

Mitsubishi Electric Corporation · GOT3000 Series GT3712-XRBAversion=all versions

Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR500-128version=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GNCF1-32Dversion=all versions

Mitsubishi Electric Corporation · CC-Link IE TSN compatible coupler NZ2FT-GNversion=all versions

Mitsubishi Electric Corporation · AC Servo MELSERVO-J5 MR-J5-G-HSversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2B1-32Tversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN12A42-16DTEversion=all versions

Mitsubishi Electric Corporation · GOT3000 Series GT3708-XRBAversion=all versions

Mitsubishi Electric Corporation · Block-type remote module with safety functions NZ2GNS12A2-14DTversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2B1-16Tversion=all versions

Mitsubishi Electric Corporation · Inverter FR-A800/F800/E800 Series FR-A800-GNversion=all versions

Mitsubishi Electric Corporation · Inverter FR-A800/F800/E800 Series FR-A8NCGversion=all versions

Mitsubishi Electric Corporation · Industrial Computer MELIPC series MI2332-Wversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2S1-32Dversion=all versions

Mitsubishi Electric Corporation · CC-Link IE TSN Master/Local module Designated communication LSI SDK SW1DNN-GN610SRC-Mversion=all versions

Mitsubishi Electric Corporation · Motion module RD78GHVversion=all versions

Mitsubishi Electric Corporation · MELSERVO-JET MR-JET-G4-HSversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN12A2-16Tversion=all versions

Mitsubishi Electric Corporation · FPGA module NZ2GN2S-D41D01version=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2S1-16Dversion=all versions

Mitsubishi Electric Corporation · Remote Station Communication LSI with GbE-PHY NZ2GACP620-60version=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2S1-32DTEversion=all versions

Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR300-64version=all versions

Mitsubishi Electric Corporation · AC Servo MELSERVO-J5 MR-J5W-Gversion=all versions

Mitsubishi Electric Corporation · Master/local module RJ71GN11-SXversion=all versions

Mitsubishi Electric Corporation · FPGA module NZ2GN2S-D41P01version=all versions

Mitsubishi Electric Corporation · Motion module RD78G8version=all versions

Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100-16-N32version=all versions

Mitsubishi Electric Corporation · Tension meter LM7-1LGversion=all versions

Mitsubishi Electric Corporation · Motion module FX5-80SSC-Gversion=all versions

Mitsubishi Electric Corporation · AC Servo MELSERVO-J5 MR-J5D-G4version=all versions

Mitsubishi Electric Corporation · Analysis Support Software MELSOFT VIMA SW1DNN-VIMA-Mversion=all versions

Mitsubishi Electric Corporation · FPGA module NZ2GN2S-D41PD02version=all versions

Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR300-32version=all versions

Mitsubishi Electric Corporation · 2F-DQ535-TSNversion=all versions

Mitsubishi Electric Corporation · GOT3000 Series GT3710-XRBAversion=all versions

Mitsubishi Electric Corporation · CC-Link IE TSN expansion unit FCU8-EX569version=all versions

Mitsubishi Electric Corporation · AC Servo MELSERVO-JET MR-JET-Gversion=all versions

Mitsubishi Electric Corporation · GOT3000 Series GT3708-XRBDversion=all versions

Mitsubishi Electric Corporation · Motion module RD78G4version=all versions

Mitsubishi Electric Corporation · Motion Control Software SWM-Gversion=all versions

Mitsubishi Electric Corporation · RD78G16version=all versions

Mitsubishi Electric Corporation · Tension meter LM7-2LGversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2B1-32Dversion=all versions

Mitsubishi Electric Corporation · Industrial Computer MELIPC series MI2532-Wversion=all versions

Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100-16-P32version=all versions

Mitsubishi Electric Corporation · Remote Station Communication LSI with GbE-PHY NZ2GACP621-720version=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2S1-16Tversion=all versions

Mitsubishi Electric Corporation · AC Servo MELSERVO-J5 MR-J5-Gversion=all versions

Mitsubishi Electric Corporation · Inverter FR-A800/F800/E800 Series FR-A8NCG-Sversion=all versions

Mitsubishi Electric Corporation · Master/local module FX5-CCLGN-MSversion=all versions

Mitsubishi Electric Corporation · GOT3000 Series GT3715-XRBDversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GNCF1-32Tversion=all versions

Mitsubishi Electric Corporation · Motion module RD78GHWversion=all versions

Mitsubishi Electric Corporation · Block-type remote module with safety functions NZ2GNSS2-8TE-Kversion=all versions

Mitsubishi Electric Corporation · AC Servo MELSERVO-J5 MR-J5-G-LLversion=all versions

Mitsubishi Electric Corporation · Motion Control Software SWM-G-N1version=all versions

Mitsubishi Electric Corporation · Motion module FX5-40SSC-Gversion=all versions

Mitsubishi Electric Corporation · Liner Track System MTR-S series Linear track control module MTR-SCU00-4Gversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2S1-16TEversion=all versions

Mitsubishi Electric Corporation · NZ2GN2S1-32Tversion=all versions

Mitsubishi Electric Corporation · Liner Track System MTR-S series Linear track control module MTR-SCU00-PGversion=all versions

Mitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR300-16version=all versions

Mitsubishi Electric Corporation · Block-type remote module with safety functions NZ2GNSS2-16DTEversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2B1-32DTEversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2B1-16Dversion=all versions

Mitsubishi Electric Corporation · Master/local module RJ71GN11-T2version=all versions

Mitsubishi Electric Corporation · Block-type remote module with safety functions NZ2GNSS2-8TEversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GNCE3-32DTversion=all versions

Mitsubishi Electric Corporation · Block-type remote module with safety functions NZ2GNS12A2-16DTEversion=all versions

Mitsubishi Electric Corporation · Master/Local module Designated communication LSI NZ2GACP610-60version=all versions

Mitsubishi Electric Corporation · MELSEC MX Controller MX-F model MXF100-8-N32version=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN12A42-16DTversion=all versions

Mitsubishi Electric Corporation · AC Servo MELSERVO-J5 MR-MD333Gversion=all versions

Mitsubishi Electric Corporation · Block-type remote module with safety functions NZ2GNSS2-16DTE-Kversion=all versions

Mitsubishi Electric Corporation · CC-Link IE TSN Communication Unit GT25-J71GN13-T2version=all versions

Mitsubishi Electric Corporation · NZ2GNCE3-32Dversion=all versions

Mitsubishi Electric Corporation · CC-Link IE TSN Communication Software for Windows SW1DND-CCIETCT-Mversion=all versions

Mitsubishi Electric Corporation · Remote Station Communication LSI with GbE-PHY NZ2GACP620-300version=all versions

Mitsubishi Electric Corporation · CC-Link IE TSN interface board NZ81GN11-SXversion=all versions

Mitsubishi Electric Corporation · NZ2GN2B1-32TEversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN12A4-16DEversion=all versions

Mitsubishi Electric Corporation · Digital-Analog converter module NZ2GN2B-60DA4version=all versions

Mitsubishi Electric Corporation · NZ2GNSS2-8Dversion=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2B1-16TEversion=all versions

Mitsubishi Electric Corporation · CC-Link IE TSN interface board NZ81GN11-T2version=all versions

Mitsubishi Electric Corporation · Master/Local module Designated communication LSI DeviceKit NZ2KT-NPETNG51version=all versions

Mitsubishi Electric Corporation · Block-type remote module NZ2GN2S1-32DTversion=all versions

Mitsubishi Electric Corporation · Remote station software development kit SW1DNC-GNSDK1S-Mversion=all versions

Mitsubishi Electric Corporation · GOT3000 Series GT3715-XRBAversion=all versions

Mitsubishi Electric Corporation · Analog-Digital converter module NZ2GN2S-60AD4version=all versions

Mitsubishi Electric Corporation · NZ2GN2S1-32TEversion=all versions

Mitsubishi Electric Corporation · Analog-Digital converter module NZ2GN2B-60AD4version=all versions

Mitsubishi Electric Corporation · Digital-Analog converter module NZ2GN2S-60DA4version=all versions

Mitsubishi Electric Corporation · Master/local module RJ71GN11-EIPversion=all versions

Mitsubishi Electric Corporation · Remote station software development kit SW1DNC-GNSDK2S-Mversion=all versions

Published CVSS scores

7.1Mitsubishi Electric CorporationCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 10, 2026Sep 16, 2026

Latest reporting daySep 16, 2026

Latest daily unique IPsUnavailable

Prior 30-day averageUnavailable

SourceShadowserver honeypots (KEV)

Vectoradjacent

Privilegesunauthenticated

Known exploitationUnconfirmed

Public exploitUnconfirmed

Weakness, pattern, technique

CWE-924Improper Enforcement of Message Integrity During Transmission in a Communication Channel

T0831Manipulation of Control

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo