CVE-2023-4625

Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module

State: Published
Severity: 5.3 Medium
Published: Nov 6, 2023
Updated: Feb 27, 2025
Reserved: Aug 30, 2023

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	Mitsubishi

Weaknesses

CWE-307 Improper Restriction of Excessive Authentication Attempts

Affected Products

Product	Versions
MELSEC iQ-F Series FX5U-32MT/ESMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-64MT/ESMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-80MT/ESMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-32MR/ESMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-64MR/ESMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-80MR/ESMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-32MT/DSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-64MT/DSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-80MT/DSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-32MR/DSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-64MR/DSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-80MR/DSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-32MT/ESSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-64MT/ESSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-80MT/ESSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-32MT/DSSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-64MT/DSSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5U-80MT/DSSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5UC-32MT/DMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5UC-64MT/DMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5UC-96MT/DMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5UC-32MT/DSSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5UC-64MT/DSSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5UC-96MT/DSSMitsubishi Electric Corporation	all versions (for serial number 17X** and later)Affected 1.060 or later (for serial number 179** and prior)Affected
MELSEC iQ-F Series FX5UC-32MT/DS-TSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UC-32MT/DSS-TSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UC-32MR/DS-TSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-24MT/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-40MT/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-60MT/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-24MR/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-40MR/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-60MR/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-24MT/ESSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-40MT/ESSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-60MT/ESSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-24MT/DSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-40MT/DSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-60MT/DSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-24MR/DSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-40MR/DSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-60MR/DSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-24MT/DSSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-40MT/DSSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-60MT/DSSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-24MT/ES-AMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-40MT/ES-AMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-60MT/ES-AMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-24MR/ES-AMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-40MR/ES-AMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5UJ-60MR/ES-AMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-30MT/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-40MT/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-60MT/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-80MT/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-30MR/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-40MR/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-60MR/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-80MR/ESMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-30MT/ESSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-40MT/ESSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-60MT/ESSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-F Series FX5S-80MT/ESSMitsubishi Electric Corporation	all versionsAffected
MELSEC iQ-R Series R00CPUMitsubishi Electric Corporation	versions 05 or laterAffected
MELSEC iQ-R Series R01CPUMitsubishi Electric Corporation	versions 05 or laterAffected
MELSEC iQ-R Series R02CPUMitsubishi Electric Corporation	versions 05 or laterAffected
MELSEC iQ-R Series R04CPUMitsubishi Electric Corporation	versions 35 or laterAffected
MELSEC iQ-R Series R08CPUMitsubishi Electric Corporation	versions 35 or laterAffected
MELSEC iQ-R Series R16CPUMitsubishi Electric Corporation	versions 35 or laterAffected
MELSEC iQ-R Series R32CPUMitsubishi Electric Corporation	versions 35 or laterAffected
MELSEC iQ-R Series R120CPUMitsubishi Electric Corporation	versions 35 or laterAffected
MELSEC iQ-R Series R04ENCPUMitsubishi Electric Corporation	versions 35 or laterAffected
MELSEC iQ-R Series R08ENCPUMitsubishi Electric Corporation	versions 35 or laterAffected
MELSEC iQ-R Series R16ENCPUMitsubishi Electric Corporation	versions 35 or laterAffected
MELSEC iQ-R Series R32ENCPUMitsubishi Electric Corporation	versions 35 or laterAffected
MELSEC iQ-R Series R120ENCPUMitsubishi Electric Corporation	versions 35 or laterAffected
MELSEC iQ-R Series R08PCPUMitsubishi Electric Corporation	versions 37 or laterAffected
MELSEC iQ-R Series R16PCPUMitsubishi Electric Corporation	versions 37 or laterAffected
MELSEC iQ-R Series R32PCPUMitsubishi Electric Corporation	versions 37 or laterAffected
MELSEC iQ-R Series R120PCPUMitsubishi Electric Corporation	versions 37 or laterAffected

References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdfvendor-advisory
https://jvn.jp/vu/JVNVU94620134government-resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.