CVE-2026-13584

Name of the Vulnerable Software and Affected Versions MELSEC MX Controller MX-R model (affected versions not specified) MELSEC MX Controller MX-F model (affected versions not specified) Master/local module (affected versions not specified) CC-Link IE TSN interface board (affected versions not specified) Motion module (affected versions not specified) Motion Control Board (affected versions not specified) Block-type remote module (affected versions not specified) Block-type remote module with safety functions (affected versions not specified) Analog-Digital converter module (affected versions not specified) Digital-Analog converter module (affected versions not specified) CC-Link IE TSN compatible coupler (affected versions not specified) FPGA module (affected versions not specified) Tension meter (affected versions not specified) AC Servo MELSERVO-J5 (affected versions not specified) AC Servo MELSERVO-JET (affected versions not specified) Liner Track System MTR-S series Linear track control module (affected versions not specified) Inverter FR-A800/F800/E800 Series (affected versions not specified) Industrial Robot CR800-D series controller Network Base Card (affected versions not specified) CC-Link IE TSN expansion unit (affected versions not specified) CC-Link IE TSN-CC-Link IE Field Network bridge module (affected versions not specified) CC-Link IE TSN-AnyWireASLINK bridge module (affected versions not specified) Energy Measuring Unit CC-Link IE TSN Communication Unit (affected versions not specified) Industrial Computer MELIPC series (affected versions not specified) GOT3000 Series (affected versions not specified) CC-Link IE TSN Communication Unit (affected versions not specified) Motion Control Software (affected versions not specified) CC-Link IE TSN Communication Software for Windows (affected versions not specified) Analysis Support Software MELSOFT VIMA (affected versions not specified) Master/Local module Designated communication LSI DeviceKit (affected versions not specified) Master/Local module Designated communication LSI (affected versions not specified) Remote Station Communication LSI with GbE-PHY (affected versions not specified) CC-Link IE TSN Master/Local module Designated communication LSI SDK (affected versions not specified) Remote station software development kit (affected versions not specified)

Description Improper enforcement of message integrity during transmission in a communication channel allows an attacker with access to a CC-Link IE TSN network to tamper with communication data, specifically control input/output values. By sending specially crafted packets under specific timing conditions, an attacker can interfere with the control function or cause the affected product to operate incorrectly, potentially leading to a denial-of-service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.