Mitsubishi Electric CC-Link IE TSN Communication Protocol Vulnerability

Mitsubishi Electric has identified a significant vulnerability (CVE-2026-13584) affecting a wide range of industrial automation products utilizing the CC-Link IE TSN communication protocol. This vulnerability exists in the protocol's handling of network traffic, specifically related to the timing of packet processing. An attacker with access to the same local network segment as the target device can leverage this flaw by injecting specially crafted packets under precise timing conditions.

If successful, the exploitation results in the interference of the device's primary control functions. This can manifest as unauthorized tampering with process communication data or the triggering of a Denial-of-Service (DoS) condition, potentially causing the industrial equipment to operate incorrectly or cease functionality entirely. Given the broad ecosystem of affected hardware, including motion modules, servos, inverters, and industrial controllers, this vulnerability poses a critical operational risk to facilities relying on these components for time-sensitive industrial control.

Impact

The vulnerability impacts a vast array of Mitsubishi Electric industrial assets, including the MELSEC iQ series, GOT3000 HMI series, and various motor control units. Successful exploitation can lead to a complete loss of control over industrial processes, potentially leading to equipment damage, process shutdowns, or safety-related disruptions in production environments. Organizations utilizing these products within their Operational Technology (OT) networks are advised to restrict network access to affected controllers and implement strict network segmentation to mitigate the risk of unauthorized traffic reaching the CC-Link IE TSN network segment.

Recommendation

• Implement strict network segmentation to ensure that only authorized devices have access to the CC-Link IE TSN network segment.
• Monitor for anomalous industrial network traffic patterns, specifically focusing on malformed or out-of-sequence packets directed at CC-Link IE TSN-enabled interfaces.
• Review the official Mitsubishi Electric security bulletin for specific patch availability or configuration hardening steps for each identified product model.
• Limit physical and logical access to the network infrastructure supporting these industrial assets to mitigate the requirement for local segment access.