Мониторинг Карточка CVE
Открытые данные
К списку уязвимостей
Высокий
Опубликована

CVE-2026-13584

Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol

Публикация: 30.07.2026·Обновлена: 18.09.2026, 02:45·Europe/Moscow

Что произошло

Автоперевод выключен · оригинальное описание

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, MELSEC iQ-L Series Motion Module, Motion Control Board, Block-type remote module, Block-type remote module with safety functions, Analog-Digital converter module, Digital-Analog converter module, CC-Link IE TSN compatible coupler, FPGA module, Tension meter, AC Servo MELSERVO-J5, AC Servo MELSERVO-JET, Liner Track System MTR-S series Linear track control module, Inverter FR-A800/F800/E800 Series, Industrial Robot CR800-D series controller Network Base Card, CC-Link IE TSN expansion unit, CC-Link IE TSN-CC-Link IE Field Network bridge module, CC-Link IE TSN-AnyWireASLINK bridge module, Energy Measuring Unit CC-Link IE TSN Communication Unit, GOT3000 Series, CC-Link IE TSN Communication Unit, Motion Control Software, CC-Link IE TSN Communication Software for Windows, Analysis Support Software MELSOFT VIMA, Master/Local module Designated communication LSI DeviceKit, Remote Station Communication LSI with GbE-PHY, CC-Link IE TSN Master/Local module Designated communication LSI SDK, and Remote station software development kit allows an attacker with access to a CC-Link IE TSN network to tamper with communication data (control input/output values) by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly.

Что это значит

В источнике описана ошибка безопасности в перечисленных продуктах. Фактический риск зависит от установленной версии, конфигурации и доступности компонента; проверьте условия в первичном бюллетене.

Что делать

Редакционные пояснения, сведения источников и общие рекомендации помечены отдельно
Устранить в течение 7 дней

1. Проверьте, затронуты ли вы

Соберите инвентаризацию и сравните с таблицей затронутых версий. Эти команды только показывают установленные компоненты и сами по себе не доказывают наличие CVE.

Debian / Ubuntu
dpkg-query -W -f='${Package}	${Version}\n'
RHEL / AlmaLinux
rpm -qa --qf '%{NAME}\t%{VERSION}-%{RELEASE}\n'
Windows PowerShell
Get-HotFix | Select-Object HotFixID, InstalledOn
Общая рекомендация, не из бюллетеня вендора

2. Установите исправление

Сверьте точный продукт и версию с бюллетенем вендора. Установите указанное в нём исправление после резервного копирования и проверки совместимости. Подтверждённая целевая версия в источниках отсутствует.

Общая рекомендация, не из бюллетеня вендора

3. Временные меры

До проверки бюллетеня ограничьте доступ к затронутому компоненту доверенными узлами. Оцените сегментацию и отключение ненужных интерфейсов с владельцем сервиса; универсального правила WAF для этой CVE не подтверждено.

Общая рекомендация, не из бюллетеня вендора

4. Проверьте следы эксплуатации

Проверьте аномальные входы, новые учётные записи, ошибки и необычные дочерние процессы в затронутом сервисе. Публичные проверенные правила обнаружения не включены в запись; отсутствие сигналов не доказывает отсутствие компрометации.

Общая рекомендация, не из бюллетеня вендора

5. После исправления

  • Проверьте фактическую версию и результат установки по бюллетеню.
  • При необходимости перезапустите сервисы в согласованное окно.
  • Повторите проверку сканером и функциональные проверки.
  • Зафиксируйте результат, дату, владельца и оставшийся риск.

Продукты и затронутые версии

Mitsubishi Electric Corporation / MELSEC MX Controller MX-R model MXR300-16 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-R model MXR300-32 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-R model MXR300-64 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-R model MXR500-128 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-R model MXR500-256 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-F model MXF100-8-N32 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-F model MXF100-8-P32 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-F model MXF100-16-N32 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-F model MXF100-16-P32 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-F model MXF100S-N32 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-F model MXF100S-P32 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-F model MXF100S-8-N32 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-F model MXF100S-8-P32 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-F model MXF100S-16-N32 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC MX Controller MX-F model MXF100S-16-P32 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Master/local module RJ71GN11-T2 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Master/local module RJ71GN11-SX 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Master/local module RJ71GN11-EIP 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Master/local module FX5-CCLGN-MS 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / CC-Link IE TSN interface board NZ81GN11-SX 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / CC-Link IE TSN interface board NZ81GN11-T2 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Motion module RD78G4 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Motion module RD78G8 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Motion module RD78G16 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Motion module RD78G64 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Motion module RD78GHV 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Motion module RD78GHW 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Motion module FX5-40SSC-G 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Motion module FX5-80SSC-G 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC iQ-L Series Motion Module LD78G4 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / MELSEC iQ-L Series Motion module LD78G16 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Motion Control Board MR-EM441G 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2S1-32D 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2S1-32T 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2S1-32TE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2S1-32DT 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2S1-32DTE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2B1-32D 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2B1-32T 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2B1-32TE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2B1-32DT 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2B1-32DTE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GNCF1-32D 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GNCF1-32T 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GNCE3-32D 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GNCE3-32DT 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN12A4-16D 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN12A4-16DE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN12A2-16T 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN12A2-16TE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN12A42-16DT 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN12A42-16DTE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2S1-16D 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2S1-16T 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2S1-16TE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2B1-16D 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2B1-16T 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module NZ2GN2B1-16TE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module with safety functions NZ2GNSS2-8D 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module with safety functions NZ2GNSS2-8D-K 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module with safety functions NZ2GNSS2-8TE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module with safety functions NZ2GNSS2-8TE-K 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module with safety functions NZ2GNSS2-16DTE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module with safety functions NZ2GNSS2-16DTE-K 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module with safety functions NZ2GNS12A2-14DT 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Block-type remote module with safety functions NZ2GNS12A2-16DTE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Analog-Digital converter module NZ2GN2S-60AD4 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Analog-Digital converter module NZ2GN2B-60AD4 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Digital-Analog converter module NZ2GN2S-60DA4 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Digital-Analog converter module NZ2GN2B-60DA4 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / CC-Link IE TSN compatible coupler NZ2FT-GN 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / FPGA module NZ2GN2S-D41P01 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / FPGA module NZ2GN2S-D41D01 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / FPGA module NZ2GN2S-D41PD02 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Tension meter LM7-1LG 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Tension meter LM7-2LG 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / AC Servo MELSERVO-J5 MR-J5-G 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / AC Servo MELSERVO-J5 MR-J5W-G 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / AC Servo MELSERVO-J5 MR-J5-G-HS 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / AC Servo MELSERVO-J5 MR-J5-G-RJ 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / AC Servo MELSERVO-J5 MR-J5-G-LL 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / AC Servo MELSERVO-J5 MR-J5D-G4 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / AC Servo MELSERVO-J5 MR-MD333G 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / AC Servo MELSERVO-JET MR-JET-G 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / AC Servo MELSERVO-JET MR-JET-G4-HS 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Liner Track System MTR-S series Linear track control module MTR-SCU00-4G 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Liner Track System MTR-S series Linear track control module MTR-SCU00-PG 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Inverter FR-A800/F800/E800 Series FR-A8NCG 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Inverter FR-A800/F800/E800 Series FR-A8NCG-S 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Inverter FR-A800/F800/E800 Series FR-A800-GN 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Inverter FR-A800/F800/E800 Series FR-E800-E 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Inverter FR-A800/F800/E800 Series FR-E800-SCE 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Industrial Robot CR800-D series controller Network Base Card 2F-DQ535-TSN 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / CC-Link IE TSN expansion unit FCU8-EX569 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / CC-Link IE TSN-CC-Link IE Field Network bridge module NZ2GN-GFB 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / CC-Link IE TSN-AnyWireASLINK bridge module NZ2AW1GNAL 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Energy Measuring Unit CC-Link IE TSN Communication Unit EMU4-CM-TSN 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / GOT3000 Series GT3715-FHCBD 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / GOT3000 Series GT3712-WXCBD 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / GOT3000 Series GT3715-XRBA 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / GOT3000 Series GT3715-XRBD 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / GOT3000 Series GT3712-XRBA 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / GOT3000 Series GT3712-XRBD 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / GOT3000 Series GT3710-XRBA 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / GOT3000 Series GT3710-XRBD 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / GOT3000 Series GT3708-XRBA 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / GOT3000 Series GT3708-XRBD 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / CC-Link IE TSN Communication Unit GT25-J71GN13-T2 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Motion Control Software SWM-G 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Motion Control Software SWM-G-N1 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / CC-Link IE TSN Communication Software for Windows SW1DND-CCIETCT-M 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Analysis Support Software MELSOFT VIMA SW1DNN-VIMA-M 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Master/Local module Designated communication LSI DeviceKit NZ2KT-NPETNG51 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Remote Station Communication LSI with GbE-PHY NZ2GACP620-60 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Remote Station Communication LSI with GbE-PHY NZ2GACP620-300 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Remote Station Communication LSI with GbE-PHY NZ2GACP621-90 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Remote Station Communication LSI with GbE-PHY NZ2GACP621-720 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / CC-Link IE TSN Master/Local module Designated communication LSI SDK SW1DNN-GN610SRC-M 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Remote station software development kit SW1DNC-GNSDK1S-M 

{
  "status": "affected",
  "version": "all versions"
}

Mitsubishi Electric Corporation / Remote station software development kit SW1DNC-GNSDK2S-M 

{
  "status": "affected",
  "version": "all versions"
}

CVSS: оценки и векторы

CVSS 4.0 · cve7.1
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
AV · Вектор атакисмежная сеть
AC · Сложность атакинизкая
AT · Условия атакидополнительные условия не нужны
PR · Привилегиине нужны
UI · Участие пользователяне нужно
VC · Конфиденциальность уязвимой системынет
VI · Целостность уязвимой системывысокое
VA · Доступность уязвимой системынизкое
SC · Конфиденциальность связанной системынет
SI · Целостность связанной системынет
SA · Доступность связанной системынет

Классы CWE

CWE-924 · Ненадлежащее обеспечение целостности сообщений при передаче по каналу связи

Источники и ссылки

Бюллетень вендора · www.mitsubishielectric.com · cveМатериал · jvn.jp · cveМатериал · www.cisa.gov · cveCVE Program · www.cve.org · CVE ProgramNVD · nvd.nist.gov · NVD
Происхождение полей
{
  "cwes": [
    "cve"
  ],
  "epss": {
    "source": "epss",
    "received_at": "2026-11-02T21:11:28.682540+00:00"
  },
  "title": {
    "source": "cve",
    "received_at": "2026-10-28T20:45:57.552145+00:00"
  },
  "scores": [
    "cve"
  ],
  "status": {
    "source": "cve",
    "received_at": "2026-10-28T20:45:57.552145+00:00"
  },
  "affected": [
    "cve"
  ],
  "published": {
    "source": "cve",
    "received_at": "2026-10-28T20:45:57.552145+00:00"
  },
  "solutions": [],
  "percentile": {
    "source": "epss",
    "received_at": "2026-11-02T21:11:28.682540+00:00"
  },
  "references": [
    "cve"
  ],
  "description": {
    "source": "cve",
    "received_at": "2026-10-28T20:45:57.552145+00:00"
  },
  "workarounds": [],
  "configurations": []
}

Хронология записи

  1. Данные обновлены03.11.2026, 00:11
  2. Данные обновлены02.11.2026, 00:10
  3. Данные обновлены31.10.2026, 11:57
  4. Данные обновлены30.10.2026, 17:47
  5. Данные обновлены29.10.2026, 11:29
  6. Опубликована28.10.2026, 23:46

Личная заметка и статус

CVE-2026-13584: Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol · CVE Радар