Medium severity5.3NVD Advisory· Published Nov 6, 2023· Updated Jun 17, 2026
CVE-2023-4625
CVE-2023-4625
Description
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
81all versions+ 53 more
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions (for serial number 17X**** and later)
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- (no CPE)range: all versions
- Mitsubishi Electric Corporation/MELSEC iQ-F Series FX5UC-32MR/DS-TSv5Range: all versions
- Mitsubishi Electric Corporation/MELSEC iQ-F Series FX5UC-32MT/DSSv5Range: all versions (for serial number 17X**** and later)
- Mitsubishi Electric Corporation/MELSEC iQ-F Series FX5UC-32MT/DSS-TSv5Range: all versions
- Mitsubishi Electric Corporation/MELSEC iQ-F Series FX5UC-32MT/DS-TSv5Range: all versions
- Mitsubishi Electric Corporation/MELSEC iQ-F Series FX5UC-64MT/DSSv5Range: all versions (for serial number 17X**** and later)
- Mitsubishi Electric Corporation/MELSEC iQ-F Series FX5UC-96MT/DSSv5Range: all versions (for serial number 17X**** and later)
- Mitsubishi Electric Corporation/MELSEC iQ-F Series FX5UJ-24MT/DSSv5Range: all versions
- Mitsubishi Electric Corporation/MELSEC iQ-F Series FX5UJ-40MT/DSSv5Range: all versions
- Mitsubishi Electric Corporation/MELSEC iQ-F Series FX5UJ-60MT/DSSv5Range: all versions
versions 05 or later+ 16 more
- (no CPE)range: versions 05 or later
- (no CPE)range: versions 05 or later
- (no CPE)range: versions 05 or later
- (no CPE)range: versions 35 or later
- (no CPE)range: versions 35 or later
- (no CPE)range: versions 35 or later
- (no CPE)range: versions 35 or later
- (no CPE)range: versions 37 or later
- (no CPE)range: versions 35 or later
- (no CPE)range: versions 35 or later
- (no CPE)range: versions 37 or later
- (no CPE)range: versions 35 or later
- (no CPE)range: versions 35 or later
- (no CPE)range: versions 37 or later
- (no CPE)range: versions 35 or later
- (no CPE)range: versions 35 or later
- (no CPE)range: versions 37 or later
Patches
Vulnerability mechanics
References
3- jvn.jp/vu/JVNVU94620134nvdThird Party Advisory
- www.cisa.gov/news-events/ics-advisories/icsa-23-306-02nvdThird Party AdvisoryUS Government Resource
- www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdfnvdVendor Advisory
News mentions
0No linked articles in our index yet.