CVE-2023-4625

Published: Nov 6, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.

Affected (63)

Products: Mitsubishielectric: Fx5u 32mt/es Firmware, Fx5u 64mt/es Firmware, Fx5u 80mt/es Firmware, Fx5u 32mr/es Firmware, Fx5u 64mr/es Firmware, Fx5u 80mr/es Firmware, Fx5u 32mt/ds Firmware, Fx5u 64mt/ds Firmware, Fx5u 80mt/ds Firmware, Fx5u 32mr/ds Firmware, Fx5u 64mr/ds Firmware, Fx5u 80mr/ds Firmware, Fx5u 32mt/ess Firmware, Fx5u 64mt/ess Firmware, Fx5u 80mt/ess Firmware, Fx5u 32mt/dss Firmware, Fx5u 64mt/dss Firmware, Fx5u 80mt/dss Firmware, Fx5uc 32mt/d Firmware, Fx5uc 64mt/d Firmware, Fx5uc 96mt/d Firmware, Fx5uc 32mt/dss Firmware, Fx5uc 64mt/dss Firmware, Fx5uc 96mt/dss Firmware, Fx5uc 32mt/ds Ts Firmware, Fx5uc 32mt/dss Ts Firmware, Fx5uc 32mr/ds Ts Firmware, Fx5uj 24mt/es Firmware, Fx5uj 40mt/es Firmware, Fx5uj 60mt/es Firmware, Fx5uj 24mr/es Firmware, Fx5uj 40mr/es Firmware, Fx5uj 60mr/es Firmware, Fx5uj 24mt/ess Firmware, Fx5uj 40mt/ess Firmware, Fx5uj 60mt/ess Firmware, Fx5uj 24mt/ds Firmware, Fx5uj 40mt/ds Firmware, Fx5uj 60mt/ds Firmware, Fx5uj 24mr/ds Firmware, Fx5uj 40mr/ds Firmware, Fx5uj 60mr/ds Firmware, Fx5uj 24mt/dss Firmware, Fx5uj 40mt/dss Firmware, Fx5uj 60mt/dss Firmware, Fx5uj 24mt/es A Firmware, Fx5uj 40mt/es A Firmware, Fx5uj 60mt/es A Firmware, Fx5uj 24mr/es A Firmware, Fx5uj 40mr/es A Firmware, Fx5uj 60mr/es A Firmware, Fx5s 30mt/es Firmware, Fx5s 40mt/es Firmware, Fx5s 60mt/es Firmware, Fx5s 80mt/es Firmware, Fx5s 30mr/es Firmware, Fx5s 40mr/es Firmware, Fx5s 60mr/es Firmware, Fx5s 80mr/es Firmware, Fx5s 30mt/ess Firmware, Fx5s 40mt/ess Firmware, Fx5s 60mt/ess Firmware, Fx5s 80mt/ess Firmware

Mitsubishielectric

63 products

Fx5u 32mt/es Firmware

Fx5u 64mt/es Firmware

Fx5u 80mt/es Firmware

Fx5u 32mr/es Firmware

Fx5u 64mr/es Firmware

Fx5u 80mr/es Firmware

Fx5u 32mt/ds Firmware

Fx5u 64mt/ds Firmware

Fx5u 80mt/ds Firmware

Fx5u 32mr/ds Firmware

Fx5u 64mr/ds Firmware

Fx5u 80mr/ds Firmware

Fx5u 32mt/ess Firmware

Fx5u 64mt/ess Firmware

Fx5u 80mt/ess Firmware

Fx5u 32mt/dss Firmware

Fx5u 64mt/dss Firmware

Fx5u 80mt/dss Firmware

Fx5uc 32mt/d Firmware

Fx5uc 64mt/d Firmware

Fx5uc 96mt/d Firmware

Fx5uc 32mt/dss Firmware

Fx5uc 64mt/dss Firmware

Fx5uc 96mt/dss Firmware

Fx5uc 32mt/ds Ts Firmware

Fx5uc 32mt/dss Ts Firmware

Fx5uc 32mr/ds Ts Firmware

Fx5uj 24mt/es Firmware

Fx5uj 40mt/es Firmware

Fx5uj 60mt/es Firmware

Fx5uj 24mr/es Firmware

Fx5uj 40mr/es Firmware

Fx5uj 60mr/es Firmware

Fx5uj 24mt/ess Firmware

Fx5uj 40mt/ess Firmware

Fx5uj 60mt/ess Firmware

Fx5uj 24mt/ds Firmware

Fx5uj 40mt/ds Firmware

Fx5uj 60mt/ds Firmware

Fx5uj 24mr/ds Firmware

Fx5uj 40mr/ds Firmware

Fx5uj 60mr/ds Firmware

Fx5uj 24mt/dss Firmware

Fx5uj 40mt/dss Firmware

Fx5uj 60mt/dss Firmware

Fx5uj 24mt/es A Firmware

Fx5uj 40mt/es A Firmware

Fx5uj 60mt/es A Firmware

Fx5uj 24mr/es A Firmware

Fx5uj 40mr/es A Firmware

Fx5uj 60mr/es A Firmware

Fx5s 30mt/es Firmware

Fx5s 40mt/es Firmware

Fx5s 60mt/es Firmware

Fx5s 80mt/es Firmware

Fx5s 30mr/es Firmware

Fx5s 40mr/es Firmware

Fx5s 60mr/es Firmware

Fx5s 80mr/es Firmware

Fx5s 30mt/ess Firmware

Fx5s 40mt/ess Firmware

Fx5s 60mt/ess Firmware

Fx5s 80mt/ess Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 32mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 32mt/es	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 64mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 64mt/es	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 80mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 80mt/es	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 32mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 32mr/es	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 64mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 64mr/es	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 80mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 80mr/es	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 32mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 32mt/ds	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 64mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 64mt/ds	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 80mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 80mt/ds	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 32mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 32mr/ds	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 64mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 64mr/ds	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 80mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 80mr/ds	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 32mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 32mt/ess	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 64mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 64mt/ess	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 80mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 80mt/ess	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 32mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 32mt/dss	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 64mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 64mt/dss	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5u 80mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5u 80mt/dss	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/d Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/d	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 64mt/d Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 64mt/d	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 96mt/d Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 96mt/d	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/dss	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 64mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 64mt/dss	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 96mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 96mt/dss	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/ds Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/ds Ts	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mt/dss Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mt/dss Ts	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uc 32mr/ds Ts Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uc 32mr/ds Ts	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mt/es	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mt/es	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mt/es	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mr/es	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mr/es	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mr/es	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mt/ess	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mt/ess	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mt/ess	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mt/ds	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mt/ds	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mt/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mt/ds	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mr/ds	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mr/ds	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mr/ds Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mr/ds	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mt/dss	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mt/dss	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mt/dss Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mt/dss	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mt/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mt/es A	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mt/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mt/es A	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mt/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mt/es A	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 24mr/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 24mr/es A	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 40mr/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 40mr/es A	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5uj 60mr/es A Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5uj 60mr/es A	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 30mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 30mt/es	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 40mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 40mt/es	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 60mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 60mt/es	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 80mt/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 80mt/es	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 30mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 30mr/es	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 40mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 40mr/es	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 60mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 60mr/es	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 80mr/es Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 80mr/es	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 30mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 30mt/ess	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 40mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 40mt/ess	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 60mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 60mt/ess	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Fx5s 80mt/ess Firmware	All versions

Running on/with	Platform Versions
Mitsubishielectric Fx5s 80mt/ess	All versions

Related CWEs

CWE-307

Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (6)

https://jvn.jp/vu/JVNVU94620134

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party Advisory

https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party AdvisoryUS Government Resource

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdf

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Vendor Advisory

https://jvn.jp/vu/JVNVU94620134

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.