CVE-2023-4625: Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ES
Vendor fix available · Affected: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 71% of scored CVEs
DescriptionCVE.org
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.
Affected products20
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ESall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ESall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ESall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/ESall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/ESall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/ESall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MR/DSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MR/DSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MR/DSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ESSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/ESSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/ESSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/DSSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-64MT/DSSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-80MT/DSSall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-32MT/Dall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
- Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5UC-64MT/Dall versions (for serial number 17X**** and later); 1.060 or later (for serial number 179**** and prior)
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Published
- November 2023
CoverageNo articles yet
No CyberSIXT article names CVE-2023-4625 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.