CVE-2023-4625

Medium

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.

SeverityMedium
CVSS5.3
Exploit probability—
ProductMitsubishielectric Fx5u-32mt\/es Firmware
PublishedNov 6, 2023
First seenNov 6, 2023
Weakness typeCWE-307CWE-307

How to fix

Affected products

ProductAffected versionsFixed in
mitsubishielectric fx5u-32mt\/es_firmwareNo range specified—
mitsubishielectric fx5u-64mt\/es_firmwareNo range specified—
mitsubishielectric fx5u-80mt\/es_firmwareNo range specified—
mitsubishielectric fx5u-32mr\/es_firmwareNo range specified—
mitsubishielectric fx5u-64mr\/es_firmwareNo range specified—
mitsubishielectric fx5u-80mr\/es_firmwareNo range specified—
mitsubishielectric fx5u-32mt\/ds_firmwareNo range specified—
mitsubishielectric fx5u-64mt\/ds_firmwareNo range specified—
mitsubishielectric fx5u-80mt\/ds_firmwareNo range specified—
mitsubishielectric fx5u-32mr\/ds_firmwareNo range specified—
mitsubishielectric fx5u-64mr\/ds_firmwareNo range specified—
mitsubishielectric fx5u-80mr\/ds_firmwareNo range specified—
mitsubishielectric fx5u-32mt\/ess_firmwareNo range specified—
mitsubishielectric fx5u-64mt\/ess_firmwareNo range specified—
mitsubishielectric fx5u-80mt\/ess_firmwareNo range specified—
mitsubishielectric fx5u-32mt\/dss_firmwareNo range specified—
mitsubishielectric fx5u-64mt\/dss_firmwareNo range specified—
mitsubishielectric fx5u-80mt\/dss_firmwareNo range specified—
mitsubishielectric fx5uc-32mt\/d_firmwareNo range specified—
mitsubishielectric fx5uc-64mt\/d_firmwareNo range specified—
mitsubishielectric fx5uc-96mt\/d_firmwareNo range specified—
mitsubishielectric fx5uc-32mt\/dss_firmwareNo range specified—
mitsubishielectric fx5uc-64mt\/dss_firmwareNo range specified—
mitsubishielectric fx5uc-96mt\/dss_firmwareNo range specified—
mitsubishielectric fx5uc-32mt\/ds-ts_firmwareNo range specified—
mitsubishielectric fx5uc-32mt\/dss-ts_firmwareNo range specified—
mitsubishielectric fx5uc-32mr\/ds-ts_firmwareNo range specified—
mitsubishielectric fx5uj-24mt\/es_firmwareNo range specified—
mitsubishielectric fx5uj-40mt\/es_firmwareNo range specified—
mitsubishielectric fx5uj-60mt\/es_firmwareNo range specified—
mitsubishielectric fx5uj-24mr\/es_firmwareNo range specified—
mitsubishielectric fx5uj-40mr\/es_firmwareNo range specified—
mitsubishielectric fx5uj-60mr\/es_firmwareNo range specified—
mitsubishielectric fx5uj-24mt\/ess_firmwareNo range specified—
mitsubishielectric fx5uj-40mt\/ess_firmwareNo range specified—
mitsubishielectric fx5uj-60mt\/ess_firmwareNo range specified—
mitsubishielectric fx5uj-24mt\/ds_firmwareNo range specified—
mitsubishielectric fx5uj-40mt\/ds_firmwareNo range specified—
mitsubishielectric fx5uj-60mt\/ds_firmwareNo range specified—
mitsubishielectric fx5uj-24mr\/ds_firmwareNo range specified—
mitsubishielectric fx5uj-40mr\/ds_firmwareNo range specified—
mitsubishielectric fx5uj-60mr\/ds_firmwareNo range specified—
mitsubishielectric fx5uj-24mt\/dss_firmwareNo range specified—
mitsubishielectric fx5uj-40mt\/dss_firmwareNo range specified—
mitsubishielectric fx5uj-60mt\/dss_firmwareNo range specified—
mitsubishielectric fx5uj-24mt\/es-a_firmwareNo range specified—
mitsubishielectric fx5uj-40mt\/es-a_firmwareNo range specified—
mitsubishielectric fx5uj-60mt\/es-a_firmwareNo range specified—
mitsubishielectric fx5uj-24mr\/es-a_firmwareNo range specified—
mitsubishielectric fx5uj-40mr\/es-a_firmwareNo range specified—
mitsubishielectric fx5uj-60mr\/es-a_firmwareNo range specified—
mitsubishielectric fx5s-30mt\/es_firmwareNo range specified—
mitsubishielectric fx5s-40mt\/es_firmwareNo range specified—
mitsubishielectric fx5s-60mt\/es_firmwareNo range specified—
mitsubishielectric fx5s-80mt\/es_firmwareNo range specified—
mitsubishielectric fx5s-30mr\/es_firmwareNo range specified—
mitsubishielectric fx5s-40mr\/es_firmwareNo range specified—
mitsubishielectric fx5s-60mr\/es_firmwareNo range specified—
mitsubishielectric fx5s-80mr\/es_firmwareNo range specified—
mitsubishielectric fx5s-30mt\/ess_firmwareNo range specified—
mitsubishielectric fx5s-40mt\/ess_firmwareNo range specified—
mitsubishielectric fx5s-60mt\/ess_firmwareNo range specified—
mitsubishielectric fx5s-80mt\/ess_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.