What’s Vulnerable › Vulnerabilities

CVE-2023-4625: Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-06 · updated 2026-06-17
• Weakness: CWE-307

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.

Affected products

• Mitsubishielectric Fx5S-30Mr/Es Firmware: all versions
• Mitsubishielectric Fx5S-30Mt/Es Firmware: all versions
• Mitsubishielectric Fx5S-30Mt/Ess Firmware: all versions
• Mitsubishielectric Fx5S-40Mr/Es Firmware: all versions
• Mitsubishielectric Fx5S-40Mt/Es Firmware: all versions
• Mitsubishielectric Fx5S-40Mt/Ess Firmware: all versions
• Mitsubishielectric Fx5S-60Mr/Es Firmware: all versions
• Mitsubishielectric Fx5S-60Mt/Es Firmware: all versions
• Mitsubishielectric Fx5S-60Mt/Ess Firmware: all versions
• Mitsubishielectric Fx5S-80Mr/Es Firmware: all versions
• Mitsubishielectric Fx5S-80Mt/Es Firmware: all versions
• Mitsubishielectric Fx5S-80Mt/Ess Firmware: all versions
• Mitsubishielectric Fx5U-32Mr/Ds Firmware: all versions
• Mitsubishielectric Fx5U-32Mr/Es Firmware: all versions
• Mitsubishielectric Fx5U-32Mt/Ds Firmware: all versions
• Mitsubishielectric Fx5U-32Mt/Dss Firmware: all versions
• Mitsubishielectric Fx5U-32Mt/Es Firmware: all versions
• Mitsubishielectric Fx5U-32Mt/Ess Firmware: all versions
• Mitsubishielectric Fx5U-64Mr/Ds Firmware: all versions
• Mitsubishielectric Fx5U-64Mr/Es Firmware: all versions
• Mitsubishielectric Fx5U-64Mt/Ds Firmware: all versions
• Mitsubishielectric Fx5U-64Mt/Dss Firmware: all versions
• Mitsubishielectric Fx5U-64Mt/Es Firmware: all versions
• Mitsubishielectric Fx5U-64Mt/Ess Firmware: all versions
• Mitsubishielectric Fx5U-80Mr/Ds Firmware: all versions
• Mitsubishielectric Fx5U-80Mr/Es Firmware: all versions
• Mitsubishielectric Fx5U-80Mt/Ds Firmware: all versions
• Mitsubishielectric Fx5U-80Mt/Dss Firmware: all versions
• Mitsubishielectric Fx5U-80Mt/Es Firmware: all versions
• Mitsubishielectric Fx5U-80Mt/Ess Firmware: all versions

References

• https://jvn.jp/vu/JVNVU94620134
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdf
• https://jvn.jp/vu/JVNVU94620134
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdf

Get alerted when CVE-2023-4625 or the next vulnerability affects your stack