title: Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module
description: Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.
problem types: CWE-307 Improper Restriction of Excessive Authentication Attempts
affected:
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MT/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MT/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MT/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MR/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MR/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MR/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-32MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-64MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5U-80MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-32MT/D
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-64MT/D
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-96MT/D
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-32MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-64MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-96MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions (for serial number 17X**** and later)
status: affected, version: 1.060 or later (for serial number 179**** and prior)
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-32MT/DS-TS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-32MT/DSS-TS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UC-32MR/DS-TS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-24MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-40MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-60MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-24MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-40MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-60MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-24MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-40MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-60MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-24MT/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-40MT/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-60MT/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-24MR/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-40MR/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-60MR/DS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-24MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-40MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-60MT/DSS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-24MT/ES-A
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-40MT/ES-A
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-60MT/ES-A
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-24MR/ES-A
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-40MR/ES-A
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5UJ-60MR/ES-A
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-30MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-40MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-60MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-80MT/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-30MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-40MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-60MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-80MR/ES
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-30MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-40MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-60MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-F Series FX5S-80MT/ESS
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R00CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 05 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R01CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 05 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R02CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 05 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R04CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R08CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R16CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R32CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R120CPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R04ENCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R08ENCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R16ENCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R32ENCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R120ENCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 35 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R08PCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 37 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R16PCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 37 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R32PCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 37 or later
}
{
defaultStatus: unaffected
product: MELSEC iQ-R Series R120PCPU
vendor: Mitsubishi Electric Corporation
versions:
status: affected, version: versions 37 or later
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL