Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2023-4625 Details

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

Weakness Enumeration

CWE-IDCWE NameSource
CWE-307Improper Restriction of Excessive Authentication Attempts[email protected]
CWE-307Improper Restriction of Excessive Authentication Attempts[email protected]

Affected Products

ProductVersions

Change History

7 change records found show changes


QUICK INFO

CVE Dictionary Entry:
CVE-2023-4625
NVD Published Date:
Nov 6, 2023
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2023-4625 Details - Not Deferred