Summary
Successful exploitation of this vulnerability could allow an attacker with access to the same network segment to tamper with communication data in the affected product by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly.
Vulnerabilities 1
-
High 7.1
Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module,…
Revision history
-
#6
CISA Republication update based on Mitsubishi Electric 2026-005 advisory
-
#5
NZ2CT-GN and FR-D800-E have been added as affected products.
-
#4
CISA Republication update based on Mitsubishi Electric 2026-005 advisory
-
#3
MXF100S-N32, MXF100S-P32, MXF100S-8-N32, MXF100S-8-P32, MXF100S-16-N32, MXF100S-16-P32, LD78G4, and LD78G16 have been added as affected products and MI2532-W, MI2332-W, and NZ2GACP610-60 have been removed from affected products.
-
#2
CISA Republication - Initial CISA Republication of Mitsubishi Electric 2026-005 advisory
-
#1
Initial Publication
References
-
Mitsubishi Electric Advisory 2026-005
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-005_en.pdf
-
ICS Advisory ICSA-26-211-07 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-07
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b