CVE-2023-4625

Published: Nov 6, 2023

Modified: Feb 27, 2025

PUBLISHED

CVSS v3.1

5.3

MEDIUM

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.

Vendor	Product	Versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/ES	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/ES	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/ES	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MR/ES	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MR/ES	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MR/ES	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/DS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/DS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/DS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MR/DS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MR/DS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MR/DS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/ESS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/ESS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/ESS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/DSS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/DSS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/DSS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/D	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-64MT/D	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-96MT/D	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DSS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-64MT/DSS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-96MT/DSS	affected `all versions (for serial number 17X** and later)` affected `1.060 or later (for serial number 179** and prior)`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DS-TS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DSS-TS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MR/DS-TS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MR/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MR/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MR/DS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/DSS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/DSS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/DSS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MR/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MR/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MR/ES-A	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MT/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MR/ES	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MT/ESS	affected `all versions`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R00CPU	affected `versions 05 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R01CPU	affected `versions 05 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R02CPU	affected `versions 05 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R04CPU	affected `versions 35 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08CPU	affected `versions 35 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16CPU	affected `versions 35 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32CPU	affected `versions 35 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120CPU	affected `versions 35 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R04ENCPU	affected `versions 35 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08ENCPU	affected `versions 35 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16ENCPU	affected `versions 35 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32ENCPU	affected `versions 35 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120ENCPU	affected `versions 35 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08PCPU	affected `versions 37 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16PCPU	affected `versions 37 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32PCPU	affected `versions 37 or later`
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120PCPU	affected `versions 37 or later`

Weaknesses (CWE)

CWE-307

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdf

vendor-advisory

https://jvn.jp/vu/JVNVU94620134

government-resource

https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02

government-resource

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-4625

Description

Affected Products

Weaknesses (CWE)

CVSS v3.1 Details

References