CVE-2023-4625— Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module

CVSS 5.3 · Medium EPSS 0.11% · P28 Updated Feb 28, 2025

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-4625

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module

Source: NVD (National Vulnerability Database)

Vulnerability Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.

Source: NVD (National Vulnerability Database)

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Source: NVD (National Vulnerability Database)

Vulnerability Type

过多认证尝试的限制不恰当

Source: NVD (National Vulnerability Database)

Vulnerability Title

Mitsubishi Electric MELSEC iQ-F series 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Mitsubishi Electric MELSEC iQ-F series是日本三菱电机（Mitsubishi Electric）公司的一款可编程逻辑控制器。 Mitsubishi Electric MELSEC iQ-F Series存在安全漏洞，该漏洞源于验证功能限制不当。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/ES	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/ES	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/ES	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MR/ES	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MR/ES	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MR/ES	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/DS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/DS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/DS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MR/DS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MR/DS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MR/DS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/ESS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/ESS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/ESS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/DSS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/DSS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/DSS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/D	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-64MT/D	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-96MT/D	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DSS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-64MT/DSS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-96MT/DSS	all versions (for serial number 17X**** and later)	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DS-TS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DSS-TS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MR/DS-TS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MR/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MR/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MR/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ESS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ESS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ESS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/DS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/DS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/DS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MR/DS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MR/DS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MR/DS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/DSS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/DSS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/DSS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ES-A	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ES-A	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ES-A	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MR/ES-A	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MR/ES-A	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MR/ES-A	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MT/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MT/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MT/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MT/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MR/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MR/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MR/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MR/ES	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MT/ESS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MT/ESS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MT/ESS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MT/ESS	all versions	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R00CPU	versions 05 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R01CPU	versions 05 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R02CPU	versions 05 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R04CPU	versions 35 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08CPU	versions 35 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16CPU	versions 35 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32CPU	versions 35 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120CPU	versions 35 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R04ENCPU	versions 35 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08ENCPU	versions 35 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16ENCPU	versions 35 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32ENCPU	versions 35 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120ENCPU	versions 35 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08PCPU	versions 37 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16PCPU	versions 37 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32PCPU	versions 37 or later	-
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120PCPU	versions 37 or later	-

II. Public POCs for CVE-2023-4625

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2023-4625

请登录查看更多情报信息。

https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02government-resource
https://jvn.jp/vu/JVNVU94620134government-resource
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdfvendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-4625

IV. Related Vulnerabilities

Same product: MELSEC iQ-F Series FX5U-32MT/ES

Same vendor: Mitsubishi Electric Corporation

Same weakness: CWE-307

V. Comments for CVE-2023-4625

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2023-4625— Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module

I. Basic Information for CVE-2023-4625

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2023-4625

III. Intelligence Information for CVE-2023-4625

IV. Related Vulnerabilities

V. Comments for CVE-2023-4625

Leave a comment