CVEvulnerability
CVE-2023-4625
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-11-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-307
Description
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.
Affected configurations
• mitsubishielectric fx5u-32mt\/es firmware
• mitsubishielectric fx5u-64mt\/es firmware
• mitsubishielectric fx5u-80mt\/es firmware
• mitsubishielectric fx5u-32mr\/es firmware
• mitsubishielectric fx5u-64mr\/es firmware
• mitsubishielectric fx5u-80mr\/es firmware
• mitsubishielectric fx5u-32mt\/ds firmware
• mitsubishielectric fx5u-64mt\/ds firmware
• mitsubishielectric fx5u-80mt\/ds firmware
• mitsubishielectric fx5u-32mr\/ds firmware
• mitsubishielectric fx5u-64mr\/ds firmware
• mitsubishielectric fx5u-80mr\/ds firmware
• mitsubishielectric fx5u-32mt\/ess firmware
• mitsubishielectric fx5u-64mt\/ess firmware
• mitsubishielectric fx5u-80mt\/ess firmware
• mitsubishielectric fx5u-32mt\/dss firmware
• mitsubishielectric fx5u-64mt\/dss firmware
• mitsubishielectric fx5u-80mt\/dss firmware
• mitsubishielectric fx5uc-32mt\/d firmware
• mitsubishielectric fx5uc-64mt\/d firmware
• mitsubishielectric fx5uc-96mt\/d firmware
• mitsubishielectric fx5uc-32mt\/dss firmware
• mitsubishielectric fx5uc-64mt\/dss firmware
• mitsubishielectric fx5uc-96mt\/dss firmware
• mitsubishielectric fx5uc-32mt\/ds-ts firmware
• mitsubishielectric fx5uc-32mt\/dss-ts firmware
• mitsubishielectric fx5uc-32mr\/ds-ts firmware
• mitsubishielectric fx5uj-24mt\/es firmware
• mitsubishielectric fx5uj-40mt\/es firmware
• mitsubishielectric fx5uj-60mt\/es firmware
• mitsubishielectric fx5uj-24mr\/es firmware
• mitsubishielectric fx5uj-40mr\/es firmware
• mitsubishielectric fx5uj-60mr\/es firmware
• mitsubishielectric fx5uj-24mt\/ess firmware
• mitsubishielectric fx5uj-40mt\/ess firmware
• mitsubishielectric fx5uj-60mt\/ess firmware
• mitsubishielectric fx5uj-24mt\/ds firmware
• mitsubishielectric fx5uj-40mt\/ds firmware
• mitsubishielectric fx5uj-60mt\/ds firmware
• mitsubishielectric fx5uj-24mr\/ds firmware
• mitsubishielectric fx5uj-40mr\/ds firmware
• mitsubishielectric fx5uj-60mr\/ds firmware
• mitsubishielectric fx5uj-24mt\/dss firmware
• mitsubishielectric fx5uj-40mt\/dss firmware
• mitsubishielectric fx5uj-60mt\/dss firmware
• mitsubishielectric fx5uj-24mt\/es-a firmware
• mitsubishielectric fx5uj-40mt\/es-a firmware
• mitsubishielectric fx5uj-60mt\/es-a firmware
• mitsubishielectric fx5uj-24mr\/es-a firmware
• mitsubishielectric fx5uj-40mr\/es-a firmware
• mitsubishielectric fx5uj-60mr\/es-a firmware
• mitsubishielectric fx5s-30mt\/es firmware
• mitsubishielectric fx5s-40mt\/es firmware
• mitsubishielectric fx5s-60mt\/es firmware
• mitsubishielectric fx5s-80mt\/es firmware
• mitsubishielectric fx5s-30mr\/es firmware
• mitsubishielectric fx5s-40mr\/es firmware
• mitsubishielectric fx5s-60mr\/es firmware
• mitsubishielectric fx5s-80mr\/es firmware
• mitsubishielectric fx5s-30mt\/ess firmware
… and 3 more
Related
Weakness · CWE (1)
- CWE-307 Improper Restriction of Excessive Authentication Attempts weakness
References
- https://jvn.jp/vu/JVNVU94620134 Third Party Advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02 Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdf Vendor Advisory
- https://jvn.jp/vu/JVNVU94620134 Third Party Advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02 Third Party Advisory, US Government Resource
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdf Vendor Advisory