What is Mitsubishi Electric?
Mitsubishi Electric is a Japanese technology group that supplies PLCs, servo systems, variable frequency drives, HMIs, industrial robots and CNC controls for industrial automation and OT environments. The company was founded in Tokyo on 15 January 1921 as a spin-off of the electrical machinery division of Mitsubishi Shipbuilding and employs more than 149,000 people. In automation it is best known for its MELSEC PLCs, the GX Works engineering software and the open CC-Link network family, which together form a complete industrial control system portfolio. In Asia it is one of the largest PLC suppliers; in Europe you mostly encounter it on machines from Japanese and other Asian machine builders, in the packaging and semiconductor industries and on CNC machine tools.
🏢 How is Mitsubishi Electric organised?
Mitsubishi Electric is an independent listed company headquartered in Marunouchi, Tokyo, and part of the loose Mitsubishi group of companies. Factory automation (FA) is one of its business areas alongside energy, buildings and consumer products.
| Business area | Examples | Relevance for OT |
|---|---|---|
| Factory automation | PLCs, servos, drives, HMIs, robots, CNC | Core of this page |
| Energy and infrastructure | Generators, switchgear, grid management systems | Power grids and power plants |
| Building systems | Lifts, escalators, air conditioning | Building automation |
| Electronic devices | Power semiconductors, optical components | Used inside drives |
| Space and information systems | Satellites, communication systems | Limited |
The company has been expanding its software and security portfolio through acquisitions. In 2019 it acquired ICONICS, the US supplier of the GENESIS64 SCADA platform. In September 2025 it announced the full acquisition of Nozomi Networks, a specialist in OT network monitoring, which closed at the end of January 2026. Nozomi continues as an independent subsidiary and still supports equipment from other vendors.
⚙️ Which automation products does Mitsubishi Electric supply?
Mitsubishi Electric supplies almost the entire control layer of a machine from a single portfolio. That makes integration straightforward, but it also increases dependence on one vendor.
| Product group | Product family | Application |
|---|---|---|
| PLC | MELSEC iQ-R, iQ-F (FX5), Q, L, FX | Machine and line control, process control |
| Engineering software | GX Works2/3, MELSOFT iQ Works | Programming, configuration, diagnostics |
| HMI | GOT2000 series, GT Designer3 | Operator panels on the machine |
| Servo and motion | MELSERVO-J5, motion CPUs | Synchronised axes, packaging, pick-and-place |
| Drives | FR-A800, FR-E800 | Speed control of pumps, fans and conveyors |
| Robotics | MELFA RV (articulated), RH (SCARA), ASSISTA (cobot) | Assembly, handling, packaging |
| CNC | M800/M80 series | Lathes and milling machines |
| SCADA and software | GENESIS64 (ICONICS), MELSOFT Gemini | Visualisation, simulation, virtual commissioning |
MELSEC and GX Works
The MELSEC family consists of the high-end modular iQ-R series (with safety, process and redundancy variants), the compact iQ-F series (FX5U, FX5UC, FX5UJ, FX5S) and the older Q, L and FX series. You program them with GX Works: GX Works2 for Q, L and FX up to FX3, and GX Works3 for iQ-R and iQ-F. The predecessor GX Developer has not been sold since 31 August 2023. GX Works supports the IEC 61131-3 languages:
- Ladder Logic - discrete logic and interlocks, the traditional language of machine building
- FBD - control loops and reusable function blocks
- ST - calculations and complex algorithms
- SFC - step-by-step sequences
Motion control and robotics
Mitsubishi Electric has traditionally been strong in motion control. The iQ-R motion CPUs (R16MTCPU, R32MTCPU and R64MTCPU) control up to 64 axes per CPU over SSCNET III/H, Mitsubishi’s own fibre-optic servo network. The newer RD78G motion modules use CC-Link IE TSN and, in the largest version, synchronise up to 256 axes. Typical applications are high-speed packaging, semiconductor production, presses and robot cells. Synchronised motion demands low latency, deterministic behaviour and minimal jitter. The MELFA robots are built on the same servo technology and communicate directly with the PLC, vision systems and SCADA.
🌐 What is CC-Link and how does it compare to other networks?
CC-Link was created by Mitsubishi Electric in 1996 as a fieldbus on RS-485. In 2000 it became an open network managed by the CC-Link Partner Association (CLPA). Since then CC-Link has no longer been owned by Mitsubishi alone: other manufacturers also supply compatible devices. According to CLPA, by 2020 there were more than 2,100 products from over 340 manufacturers and around 30 million installed devices.
| Generation | Year | Physical layer | Characteristic |
|---|---|---|---|
| CC-Link | 1996 (open since 2000) | RS-485, up to 10 Mbit/s | Classic fieldbus for I/O |
| CC-Link Safety | 2016 in IEC 61784-3-8 | As CC-Link | Safety communication |
| CC-Link IE (Control, Field) | From 2007 | Gigabit Ethernet | Controller network and field network |
| CC-Link IE Field Basic | After CC-Link IE Field | Standard 100 Mbit/s Ethernet | Software implementation, no dedicated chip |
| CC-Link IE TSN | 2018 | 100 Mbit/s and 1 Gbit/s Ethernet with TSN | Real-time and regular IT traffic on one cable |
CC-Link and CC-Link IE are included in IEC 61158 and IEC 61784, and CC-Link and CC-Link IE Field are also defined in SEMI standards (E54.12 and E54.23) for the semiconductor industry. Within Industrial Ethernet, CC-Link IE is strongest in Japan and the rest of Asia. In Europe PROFINET and EtherCAT dominate, so many Mitsubishi PLCs also support Modbus TCP, EtherNet/IP through add-on modules and OPC UA.
For links to IT systems Mitsubishi uses SLMP (SeamLess Message Protocol), which evolved from the older MC protocol, over TCP or UDP. Drivers in Kepware and many other SCADA packages speak this protocol. Like older Modbus variants, SLMP has no strong authentication of its own: anyone who can reach the network can in principle read and write PLC memory.
🧠 What is e-F@ctory?
e-F@ctory is Mitsubishi Electric’s concept for integrating factory automation and IT. It fits within Industry 4.0 and OT convergence and divides the data architecture into three layers:
| Layer | Function | Mitsubishi solution |
|---|---|---|
| Shop floor | Collect real-time data and control | MELSEC, servos, CC-Link IE TSN |
| Edge | Pre-process and analyse data close to the machine | Edge computing on industrial PCs with Edgecross software |
| IT | Visualisation, analysis, simulation and integration with MES | GENESIS64, MELSOFT Gemini, cloud platforms |
Partners in the e-F@ctory Alliance supply additional software, sensors and integration services. Data moves upwards via OPC UA, MQTT or HTTP APIs into historians and applications for industrial AI and predictive maintenance. The IIoT path therefore runs through the edge rather than directly from PLC to cloud.
🛡️ Which safety solutions does Mitsubishi Electric offer?
The iQ-R family includes a safety CPU (R08SFCPU and larger, sold as a set with the R6SFM safety function module) that combines standard and safety logic in one system. It is TÜV-certified for SIL 3 under IEC 61508 and PL e (Category 4) under ISO 13849-1. Safety signals travel over CC-Link IE TSN or CC-Link IE Field with the safety protocol to safe I/O and to servo drives with built-in safe motion functions.
| Standard | Subject | Relevance |
|---|---|---|
| IEC 61508 | Functional safety, SIL 1-4 | Safety CPU certified up to SIL 3 |
| ISO 13849 | Machine safety, Performance Level a-e | Safety CPU suitable up to PL e |
| IEC 62061 | Machine safety based on SIL | Alternative to ISO 13849 |
| IEC 61511 | Process safety (SIS) | Only in process plants, less typical for Mitsubishi |
🔐 How do you secure a Mitsubishi environment?
Mitsubishi equipment faces the same risks as that of other vendors: legacy protocols without authentication, unauthorised downloads to the PLC compromised engineering stations, malware on USB sticks and insiders with excessive rights. The consequences go beyond downtime: manipulated motion parameters or robot programs can damage machines and put operators at risk. Mitsubishi Electric has had a PSIRT since 1 April 2019 and has been a CVE Numbering Authority since 4 December 2020, assigning its own CVE numbers. Two well-known examples:
- CVE-2023-6943 (January 2024, CVSS 9.8) - a flaw in the communication components of GX Works2, GX Works3, MT Works2, GT Designer3 and MX OPC Server, among others, that let an attacker execute code remotely on the engineering station
- CVE-2023-2060, -2061 and -2063 (June 2023) - weak password requirements, hard-coded FTP credentials and unrestricted file uploads in the RJ71EIP91 and FX5-ENET/IP EtherNet/IP modules, also covered by a CISA advisory
In January 2020 Mitsubishi Electric also disclosed that it had itself been the victim of a long-running cyberattack on its office network that began in 2019.
A practical approach in five steps
- Inventory all MELSEC CPUs, communication modules, GOT panels and software versions, and match them against Mitsubishi’s advisories.
- Segment in line with IEC 62443 and the Purdue Model using network segmentation: SLMP and CC-Link IE do not belong on the office network.
- Restrict access with the CPU’s IP filter and security key, MFA and a jump server for remote maintenance.
- Harden the engineering station with application whitelisting, patch management for GX Works and a recent backup of every PLC project.
- Monitor the network with passive detection, such as Nozomi Guardian, and central logging of downloads and mode changes.
The Cyber Resilience Act affects both Mitsubishi and the machine builders that integrate its components: actively exploited vulnerabilities must be reported from 11 September 2026 (see CRA Reporting Obligations), and from 11 December 2027 products with digital elements placed on the EU market must demonstrably meet the security requirements.
🏭 In which sectors will you find Mitsubishi automation?
Mitsubishi controllers are found mainly in discrete manufacturing and machine building, but also in process plants and infrastructure. What an OT manager needs to watch differs per sector.
| Sector | Typical application | OT attention point |
|---|---|---|
| Automotive | Welding robots, assembly lines, conveyors | Many robots and motion axes per cell; control program changes tightly |
| Semiconductors and electronics | Wafer handling, pick-and-place, precision motion | High precision and low jitter; CC-Link under SEMI standards |
| Food and packaging | Packaging lines, batch processes, tracking and tracing | Many OEM machines with the supplier’s own remote access |
| Energy and water | Energy management, pumping stations, water treatment | Long service life and old Q and FX systems in critical processes |
Mitsubishi is also investing in digital twins: with MELSOFT Gemini you can simulate a line with the real PLC programs before the hardware is in place.
🔄 How does Mitsubishi Electric compare with other PLC vendors?
| Vendor | PLC platform | Preferred network | Strongest region |
|---|---|---|---|
| Mitsubishi Electric | MELSEC | CC-Link IE | Asia |
| Siemens | SIMATIC S7 | PROFINET | Europe |
| Rockwell Automation | ControlLogix, CompactLogix | EtherNet/IP | North America |
| Omron | Sysmac NX/NJ | EtherCAT | Asia and Europe |
Mitsubishi’s strengths are a complete in-house portfolio from PLC to robot, strong motion control and long product support. Its weaknesses are dependence on a single ecosystem, a smaller knowledge base among European system integrators and complex migrations from old A and Q systems. Good lifecycle management prevents you from discovering only after a failure that a module is no longer available.
❓ Frequently asked questions
Is Mitsubishi Electric the same company as Mitsubishi Motors?
No, Mitsubishi Electric is an independent listed company, separate from Mitsubishi Motors and Mitsubishi Heavy Industries, among others. Mitsubishi Electric was spun off from Mitsubishi Shipbuilding in 1921 and focuses on electrical engineering, automation and electronics.
Which software do you use for Mitsubishi PLCs?
You program Mitsubishi PLCs with GX Works: GX Works2 for the MELSEC Q, L and FX series and GX Works3 for iQ-R and iQ-F. GOT series HMIs are configured with GT Designer3, and motion controllers with MT Works2.
Is CC-Link an open standard?
Yes, CC-Link has been an open network since 2000, managed by the CC-Link Partner Association. CC-Link and CC-Link IE are included in IEC 61158 and IEC 61784, and hundreds of manufacturers supply compatible devices.
How do you connect a Mitsubishi PLC to SCADA or MES?
You connect a Mitsubishi PLC to SCADA or MES via OPC UA, via the SLMP protocol over Ethernet or via a protocol gateway such as Kepware. In an e-F@ctory architecture the data usually passes through an edge PC first, which pre-processes it before it reaches the historian, MES or cloud.
Why is Mitsubishi Electric relevant for OT security?
As a CVE Numbering Authority, Mitsubishi Electric publishes vulnerabilities in its own PLCs and engineering software, including critical flaws rated CVSS 9.8. Since January 2026 Mitsubishi has also owned Nozomi Networks, one of the best-known suppliers of OT network monitoring.
Is the MELSEC Q series still supported?
The MELSEC Q series is still widely used and GX Works2 still supports it, but the iQ-R series is its successor for new installations. You can open and convert Q projects in GX Works3, which allows a gradual migration.
📌 In summary
With MELSEC, GX Works, MELSERVO, GOT, MELFA robots and CC-Link, Mitsubishi Electric offers a complete automation portfolio that is widely used in Asia and in machine building. Through e-F@ctory, ICONICS and Nozomi Networks the company is expanding towards data integration and OT security. If you manage Mitsubishi equipment, you need to account for its own ecosystem, long lifecycles and a steady stream of security advisories.
Mitsubishi Electric is a Japanese full-line supplier of PLCs, motion control and robotics whose MELSEC systems stay secure and future-proof through segmentation, a hardened engineering station and active vulnerability management.