5.3
Medium
CVE-2025-5241 Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…
Description
Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lockout legitimate users for a certain period by repeatedly attempting to login with incorrect passwords. The legitimate users will be unable to login until a certain period has passed after the lockout or until the product is reset.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MELSEC iQ-F Series FX5U-32MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/DSS | Versions not published | |
| MELSEC iQ-F Series FX5U-32MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-32MR/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/ESS | Versions not published |
Show the 64 other branches Hide the 64 other branches
Other CVEs of MELSEC iQ-F Series FX5U-32MT/ES
The 11 CVEs of MELSEC iQ-F Series FX5U-32MT/ES →
CVE-2025-10259
Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric…
5.3
Medium
CVE-2025-7731
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…
7.5
High
CVE-2025-7405
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU…
7.3
High
CVE-2025-5514
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric…
5.3
Medium