CVE-2023-4625

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.

• CWE-307
• CWE-307

• https://jvn.jp/vu/JVNVU94620134Third Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdfVendor Advisory
• https://jvn.jp/vu/JVNVU94620134Third Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-02Third Party Advisory, US Government Resource
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-014_en.pdfVendor Advisory

Published

Nov 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-46244XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-46245Kimai is a web-based multi-user time-tracking application. V…7.2
• CVE-2023-46246Vim is an improved version of the good old UNIX editor Vi. H…5.5
• CVE-2023-46247Vyper is a Pythonic Smart Contract Language for the Ethereum…7.5
• CVE-2023-46248Cody is an artificial intelligence (AI) coding assistant. Th…8.8
• CVE-2023-46249authentik is an open-source Identity Provider. Prior to vers…9.8
• CVE-2023-46250pypdf is a free and open-source pure-python PDF library. An …5.5
• CVE-2023-46251 MyBB is a free and open source forum software. Custom MyCod…6.1
• CVE-2023-46252Squidex is an open source headless CMS and content managemen…6.1
• CVE-2023-46253Squidex is an open source headless CMS and content managemen…7.2
• CVE-2023-46254capsule-proxy is a reverse proxy for Capsule kubernetes mult…4.3
• CVE-2023-46255SpiceDB is an open source, Google Zanzibar-inspired database…6.5