SARA / Free Tools / CVE / CVE-2023-4625

CVE-2023-4625 — Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsu

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a

CVSS
5.3 MEDIUM
EPSS
0.11% (top 71.50%)
CWE
CWE-307
Published
2023-11-06T04:57:44.446Z
Last modified
2025-02-27T20:34:25.710Z
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

01What is this vulnerability?

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to…

02Affected products

VendorProductVersions
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-32MT/ES — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-64MT/ES — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-80MT/ES — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-32MR/ES — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-64MR/ES — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-80MR/ES — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-32MT/DS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-64MT/DS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-80MT/DS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-32MR/DS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-64MR/DS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-80MR/DS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-32MT/ESS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-64MT/ESS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-80MT/ESS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-32MT/DSS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-64MT/DSS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5U-80MT/DSS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5UC-32MT/D — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5UC-64MT/D — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5UC-96MT/D — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5UC-32MT/DSS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5UC-64MT/DSS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5UC-96MT/DSS — all versions (for serial number 17X**** and later), 1.060 or later (for serial number 179**** and prior)
Mitsubishi Electric CorporationMELSEC iQF Series FX5UC-32MT/DS-TS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UC-32MT/DSS-TS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UC-32MR/DS-TS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-24MT/ES — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-40MT/ES — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-60MT/ES — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-24MR/ES — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-40MR/ES — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-60MR/ES — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-24MT/ESS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-40MT/ESS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-60MT/ESS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-24MT/DS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-40MT/DS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-60MT/DS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-24MR/DS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-40MR/DS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-60MR/DS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-24MT/DSS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-40MT/DSS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-60MT/DSS — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-24MT/ES-A — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-40MT/ES-A — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-60MT/ES-A — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-24MR/ES-A — all versions
Mitsubishi Electric CorporationMELSEC iQF Series FX5UJ-40MR/ES-A — all versions

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →