Vulnerability-Lookup

ICSA-23-306-02

Vulnerability from csaf_cisa - Published: 2023-11-02 06:00 - Updated: 2024-02-15 07:00

Summary

Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module (Update A)

Notes

Legal Notice: All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.

Risk evaluation: Successful exploitation of this vulnerability could allow a remote attacker to prevent legitimate users from logging into the web server function for a certain period, resulting in a denial-of-service condition. The impact of this vulnerability will persist while the attacker continues to attempt the attack.

Critical infrastructure sectors: Critical Manufacturing

Countries/areas deployed: Worldwide

Company headquarters location: Japan

Recommended Practices: CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Recommended Practices: Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.

Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Recommended Practices: No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.

CVE-2023-4625

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-307 - Improper Restriction of Excessive Authentication Attempts

Affected products

Known affected 11 products

Product	Version	Remediation
Mitsubishi Electric FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS (Serial number 17X**** and later): vers:all/* Mitsubishi Electric / FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS (Serial number 17X**** and later)	vers:all/*	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix
Mitsubishi Electric FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS (Serial number 179** and prior): >=1.060 Mitsubishi Electric / FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS (Serial number 179** and prior)	>=1.060	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix
Mitsubishi Electric FX5UC-xMy/z x=32,64,96, y=T, z=D,DSS (Serial number 17X**** and later): vers:all/* Mitsubishi Electric / FX5UC-xMy/z x=32,64,96, y=T, z=D,DSS (Serial number 17X**** and later)	vers:all/*	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix
Mitsubishi Electric FX5UC-xMy/z x=32,64,96, y=T, z=D,DSS (Serial number 179** and prior): >=1.060 Mitsubishi Electric / FX5UC-xMy/z x=32,64,96, y=T, z=D,DSS (Serial number 179** and prior)	>=1.060	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix
Mitsubishi Electric FX5UC-32MT/DS-TS, FX5UC-32MT/DSS-TS, FX5UC-32MR/DS-TS: vers:all/* Mitsubishi Electric / FX5UC-32MT/DS-TS, FX5UC-32MT/DSS-TS, FX5UC-32MR/DS-TS	vers:all/*	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix
Mitsubishi Electric FX5UJ-xMy/z x=24,40,60, y=T,R, z=ES,DS,ESS,DSS: vers:all/* Mitsubishi Electric / FX5UJ-xMy/z x=24,40,60, y=T,R, z=ES,DS,ESS,DSS	vers:all/*	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix
Mitsubishi Electric FX5UJ-xMy/ES-A* x=24,40,60, y=T,R: vers:all/* Mitsubishi Electric / FX5UJ-xMy/ES-A* x=24,40,60, y=T,R	vers:all/*	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix
Mitsubishi Electric FX5S-xMy/z x=30,40,60,80, y=T,R, z=ES,ESS: vers:all/ Mitsubishi Electric / FX5S-xMy/z x=30,40,60,80*, y=T,R, z=ES,ESS	vers:all/*	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix
Mitsubishi Electric R00/01/02CPU: >=05 Mitsubishi Electric / R00/01/02CPU	>=05	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix
Mitsubishi Electric R04/08/16/32/120(EN)CPU: >=35 Mitsubishi Electric / R04/08/16/32/120(EN)CPU	>=35	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix
Mitsubishi Electric R08/16/32/120/PCPU: >=37 Mitsubishi Electric / R08/16/32/120/PCPU	>=37	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix

References

10 references

URL	Category
https://raw.githubusercontent.com/cisagov/CSAF/de…	self
https://www.cisa.gov/news-events/ics-advisories/i…	self
https://www.cisa.gov/resources-tools/resources/ic…	external
https://www.cisa.gov/sites/default/files/publicat…	external
https://www.cisa.gov/topics/industrial-control-systems	external
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-…	external
https://us-cert.cisa.gov/sites/default/files/reco…	external
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B	external
http://web.nvd.nist.gov/view/vuln/detail?vulnId=C…	external
https://www.first.org/cvss/calculator/3.1#CVSS:3.…	external

Acknowledgments

ELEX FEIGONG RESEARCH INSTITUTE of Elex Cybersecurity, Inc Peter Cheng

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Peter Cheng"
        ],
        "organization": "ELEX FEIGONG RESEARCH INSTITUTE of Elex Cybersecurity, Inc",
        "summary": "reporting this vulnerability to Mitsubishi Electric"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of this vulnerability could allow a remote attacker to prevent legitimate users from logging into the web server function for a certain period, resulting in a denial-of-service condition. The impact of this vulnerability will persist while the attacker continues to attempt the attack.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Critical Manufacturing",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Japan",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-23-306-02 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-306-02.json"
      },
      {
        "category": "self",
        "summary": "ICSA Advisory ICSA-23-306-02 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      }
    ],
    "title": "Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module (Update A)",
    "tracking": {
      "current_release_date": "2024-02-15T07:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-23-306-02",
      "initial_release_date": "2023-11-02T06:00:00.000000Z",
      "revision_history": [
        {
          "date": "2023-11-02T06:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "Initial Publication"
        },
        {
          "date": "2024-02-15T07:00:00.000000Z",
          "legacy_version": "Update A",
          "number": "2",
          "summary": "Update A - Updated all iterations of MELSEC iQ-F to MELSEC iQ-F/iQ-R throughout the document, added iQ-R products and versions to Affected Products section, and additional mitigations in Mitigation Section."
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Mitsubishi Electric FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS (Serial number 17X**** and later): vers:all/*",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS (Serial number 17X**** and later)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.060",
                "product": {
                  "name": "Mitsubishi Electric FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS (Serial number 179**** and prior): \u003e=1.060",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS (Serial number 179**** and prior)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Mitsubishi Electric FX5UC-xMy/z x=32,64,96, y=T, z=D,DSS (Serial number 17X**** and later): vers:all/*",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "FX5UC-xMy/z x=32,64,96, y=T, z=D,DSS (Serial number 17X**** and later)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.060",
                "product": {
                  "name": "Mitsubishi Electric FX5UC-xMy/z x=32,64,96, y=T, z=D,DSS (Serial number 179**** and prior): \u003e=1.060",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "FX5UC-xMy/z x=32,64,96, y=T, z=D,DSS (Serial number 179**** and prior)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Mitsubishi Electric FX5UC-32MT/DS-TS, FX5UC-32MT/DSS-TS, FX5UC-32MR/DS-TS: vers:all/*",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "FX5UC-32MT/DS-TS, FX5UC-32MT/DSS-TS, FX5UC-32MR/DS-TS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Mitsubishi Electric FX5UJ-xMy/z x=24,40,60, y=T,R, z=ES,DS,ESS,DSS: vers:all/*",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "FX5UJ-xMy/z x=24,40,60, y=T,R, z=ES,DS,ESS,DSS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Mitsubishi Electric FX5UJ-xMy/ES-A* x=24,40,60, y=T,R: vers:all/*",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "FX5UJ-xMy/ES-A* x=24,40,60, y=T,R"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Mitsubishi Electric FX5S-xMy/z x=30,40,60,80*, y=T,R, z=ES,ESS: vers:all/*",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "FX5S-xMy/z x=30,40,60,80*, y=T,R, z=ES,ESS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=05",
                "product": {
                  "name": "Mitsubishi Electric R00/01/02CPU: \u003e=05",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "R00/01/02CPU"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=35",
                "product": {
                  "name": "Mitsubishi Electric R04/08/16/32/120(EN)CPU: \u003e=35",
                  "product_id": "CSAFPID-0010"
                }
              }
            ],
            "category": "product_name",
            "name": "R04/08/16/32/120(EN)CPU"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=37",
                "product": {
                  "name": "Mitsubishi Electric R08/16/32/120/PCPU: \u003e=37",
                  "product_id": "CSAFPID-0011"
                }
              }
            ],
            "category": "product_name",
            "name": "R08/16/32/120/PCPU"
          }
        ],
        "category": "vendor",
        "name": "Mitsubishi Electric"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-4625",
      "cwe": {
        "id": "CWE-307",
        "name": "Improper Restriction of Excessive Authentication Attempts"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A denial-of-service vulnerability exists in the web server function of the MELSEC iQ-F/iQ-R Series CPU module, which could allow an attacker to prevent legitimate users from logging in to the web server function for a certain period of time. The impact of this vulnerability will persist while the attacker continues to attempt the attack.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-0010",
          "CSAFPID-0011"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4625"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ]
        },
        {
          "category": "mitigation",
          "details": "Use a firewall or virtual private network (VPN), etc. to prevent unauthorized access when Internet access is required.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ]
        },
        {
          "category": "mitigation",
          "details": "Use within a LAN and block access from untrusted networks and hosts through firewalls.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ]
        },
        {
          "category": "mitigation",
          "details": "Use IP filter function to block access from untrusted hosts. For details on the IP filter function, following manual for each product; \"12.1 IP Filter Function\" in the MELSEC iQ-F FX5 User\u0027s Manual (Ethernet Communication), \"1.13 Security\" \u2013 \"IP Filter\" in the MELSEC iQ-R Ethernet User\u0027s Manual (Application).",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ]
        },
        {
          "category": "mitigation",
          "details": "Restrict physical access to the affected products and the LAN that is connected by them.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ]
        },
        {
          "category": "mitigation",
          "details": "For additional information refer to Mitsubishi Electric\u0027s security bulletin 2023-014_en.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ],
          "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdf"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ]
        }
      ]
    }
  ]
}

CVE-2023-4625 (GCVE-0-2023-4625)

Vulnerability from cvelistv5 – Published: 2023-11-06 04:57 – Updated: 2025-02-27 20:34

Title

Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module

Summary

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-26 21:49 UTC

CWE

CWE-307 - Improper Restriction of Excessive Authentication Attempts

Assigner

Mitsubishi CNA under the jpcert root

CNA scorecard – unranked: 8 records in the last 180 days, 10 needed details

References

3 references

URL	Tags
https://www.mitsubishielectric.com/en/psirt/vulne…	vendor-advisory
https://jvn.jp/vu/JVNVU94620134	government-resource
https://www.cisa.gov/news-events/ics-advisories/i…	government-resource

Impacted products

80 products

Vendor	Product	Version
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/ES	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/ES	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/ES	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MR/ES	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MR/ES	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MR/ES	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/DS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/DS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/DS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MR/DS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MR/DS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MR/DS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/ESS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/ESS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/ESS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-32MT/DSS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-64MT/DSS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5U-80MT/DSS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/D	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-64MT/D	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-96MT/D	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DSS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-64MT/DSS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-96MT/DSS	Affected: all versions (for serial number 17X** and later) Affected: 1.060 or later (for serial number 179** and prior)
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DS-TS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MT/DSS-TS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UC-32MR/DS-TS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MR/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MR/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MR/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ESS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ESS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ESS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/DS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/DS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/DS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MR/DS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MR/DS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MR/DS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/DSS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/DSS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/DSS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MT/ES-A	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MT/ES-A	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MT/ES-A	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-24MR/ES-A	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-40MR/ES-A	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5UJ-60MR/ES-A	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MT/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MT/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MT/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MT/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MR/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MR/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MR/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MR/ES	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-30MT/ESS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-40MT/ESS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-60MT/ESS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-F Series FX5S-80MT/ESS	Affected: all versions
Mitsubishi Electric Corporation	MELSEC iQ-R Series R00CPU	Affected: versions 05 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R01CPU	Affected: versions 05 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R02CPU	Affected: versions 05 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R04CPU	Affected: versions 35 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08CPU	Affected: versions 35 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16CPU	Affected: versions 35 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32CPU	Affected: versions 35 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120CPU	Affected: versions 35 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R04ENCPU	Affected: versions 35 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08ENCPU	Affected: versions 35 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16ENCPU	Affected: versions 35 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32ENCPU	Affected: versions 35 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120ENCPU	Affected: versions 35 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R08PCPU	Affected: versions 37 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R16PCPU	Affected: versions 37 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R32PCPU	Affected: versions 37 or later
Mitsubishi Electric Corporation	MELSEC iQ-R Series R120PCPU	Affected: versions 37 or later

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:31:06.570Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdf"
          },
          {
            "tags": [
              "government-resource",
              "x_transferred"
            ],
            "url": "https://jvn.jp/vu/JVNVU94620134"
          },
          {
            "tags": [
              "government-resource",
              "x_transferred"
            ],
            "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-4625",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-26T21:49:50.263922Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-27T20:34:25.710Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-32MT/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-64MT/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-80MT/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-32MR/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-64MR/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-80MR/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-32MT/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-64MT/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-80MT/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-32MR/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-64MR/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-80MR/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-32MT/ESS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-64MT/ESS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-80MT/ESS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-32MT/DSS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-64MT/DSS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5U-80MT/DSS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UC-32MT/D",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UC-64MT/D",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UC-96MT/D",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UC-32MT/DSS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UC-64MT/DSS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UC-96MT/DSS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions (for serial number 17X**** and later)"
            },
            {
              "status": "affected",
              "version": "1.060 or later (for serial number 179**** and prior)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UC-32MT/DS-TS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UC-32MT/DSS-TS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UC-32MR/DS-TS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-24MT/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-40MT/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-60MT/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-24MR/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-40MR/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-60MR/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-24MT/ESS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-40MT/ESS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-60MT/ESS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-24MT/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-40MT/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-60MT/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-24MR/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-40MR/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-60MR/DS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-24MT/DSS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-40MT/DSS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-60MT/DSS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-24MT/ES-A",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-40MT/ES-A",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-60MT/ES-A",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-24MR/ES-A",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-40MR/ES-A",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5UJ-60MR/ES-A",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-30MT/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-40MT/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-60MT/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-80MT/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-30MR/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-40MR/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-60MR/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-80MR/ES",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-30MT/ESS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-40MT/ESS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-60MT/ESS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-F Series FX5S-80MT/ESS",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R00CPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 05 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R01CPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 05 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R02CPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 05 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R04CPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 35 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R08CPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 35 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R16CPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 35 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R32CPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 35 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R120CPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 35 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R04ENCPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 35 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R08ENCPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 35 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R16ENCPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 35 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R32ENCPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 35 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R120ENCPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 35 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R08PCPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 37 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R16PCPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 37 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R32PCPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 37 or later"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MELSEC iQ-R Series R120PCPU",
          "vendor": "Mitsubishi Electric Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "versions 37 or later"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login."
            }
          ],
          "value": "Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Denial of Service(DoS)"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-307",
              "description": "CWE-307 Improper Restriction of Excessive Authentication Attempts",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-15T05:17:45.711Z",
        "orgId": "e0f77b61-78fd-4786-b3fb-1ee347a748ad",
        "shortName": "Mitsubishi"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdf"
        },
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://jvn.jp/vu/JVNVU94620134"
        },
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Denial-of-Service\uff08DoS\uff09 Vulnerability in Web server function on MELSEC Series CPU module",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e0f77b61-78fd-4786-b3fb-1ee347a748ad",
    "assignerShortName": "Mitsubishi",
    "cveId": "CVE-2023-4625",
    "datePublished": "2023-11-06T04:57:44.446Z",
    "dateReserved": "2023-08-30T12:11:44.835Z",
    "dateUpdated": "2025-02-27T20:34:25.710Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted