Description (CNA)
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-32MT/ES | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-64MT/ES | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-80MT/ES | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-32MR/ES | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-64MR/ES | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-80MR/ES | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-32MT/DS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-64MT/DS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-80MT/DS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-32MR/DS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-64MR/DS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-80MR/DS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-32MT/ESS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-64MT/ESS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-80MT/ESS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-32MT/DSS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-64MT/DSS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5U-80MT/DSS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UC-32MT/D | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UC-64MT/D | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UC-96MT/D | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UC-32MT/DSS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UC-64MT/DSS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UC-96MT/DSS | affected all versions (for serial number 17X**** and later); affected 1.060 or later (for serial number 179**** and prior) |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UC-32MT/DS-TS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UC-32MT/DSS-TS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UC-32MR/DS-TS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-24MT/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-40MT/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-60MT/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-24MR/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-40MR/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-60MR/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-24MT/ESS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-40MT/ESS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-60MT/ESS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-24MT/DS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-40MT/DS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-60MT/DS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-24MR/DS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-40MR/DS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-60MR/DS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-24MT/DSS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-40MT/DSS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-60MT/DSS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-24MT/ES-A | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-40MT/ES-A | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-60MT/ES-A | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-24MR/ES-A | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-40MR/ES-A | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5UJ-60MR/ES-A | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-30MT/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-40MT/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-60MT/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-80MT/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-30MR/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-40MR/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-60MR/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-80MR/ES | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-30MT/ESS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-40MT/ESS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-60MT/ESS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-F Series FX5S-80MT/ESS | affected all versions |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R00CPU | affected versions 05 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R01CPU | affected versions 05 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R02CPU | affected versions 05 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R04CPU | affected versions 35 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R08CPU | affected versions 35 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R16CPU | affected versions 35 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R32CPU | affected versions 35 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R120CPU | affected versions 35 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R04ENCPU | affected versions 35 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R08ENCPU | affected versions 35 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R16ENCPU | affected versions 35 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R32ENCPU | affected versions 35 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R120ENCPU | affected versions 35 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R08PCPU | affected versions 37 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R16PCPU | affected versions 37 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R32PCPU | affected versions 37 or later |
| Mitsubishi Electric Corporation / MELSEC iQ-R Series R120PCPU | affected versions 37 or later |
CWE
CWE-307
References
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdf
- https://jvn.jp/vu/JVNVU94620134
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.