5.3
Medium
CVE-2023-4625 Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC…
Description
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MELSEC iQ-F Series FX5U-32MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-80MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-32MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-64MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-80MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-80MT/DS | Versions not published |
Show the 71 other branches Hide the 71 other branches
Other CVEs of MELSEC iQ-F Series FX5U-32MT/ES
The 11 CVEs of MELSEC iQ-F Series FX5U-32MT/ES →
CVE-2025-10259
Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric…
5.3
Medium
CVE-2025-7731
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…
7.5
High
CVE-2025-7405
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU…
7.3
High
CVE-2025-5514
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric…
5.3
Medium