CVE-2023-4625

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-307

Affected software

No affected versions have been published.

Timeline

Published: Nov 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-462505.5pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can c CVE-2023-462516.1MyBB is a free and open source forum software. Custom MyCode (BBCode) for the visual editor (_SCEditor_) doesn't escape input properly when CVE-2023-462526.1Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handle CVE-2023-462537.2Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file write vulnerability in CVE-2023-462544.3capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used by `capsule-proxy` CVE-2023-462556.5SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Prior to v CVE-2023-462569.8PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vu CVE-2023-462579.8An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of CVE-2023-462589.8An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of CVE-2023-462599.8An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of CVE-2023-46264.3The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ladiflow_save_h CVE-2023-462609.8An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of