Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lockout legitimate users for a certain period by repeatedly attempting to login with incorrect passwords. The legitimate users will be unable to login until a certain period has passed after the lockout or until the product is reset.
Metrics
Affected Vendors & Products
References
History
Fri, 11 Jul 2025 14:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Fri, 11 Jul 2025 13:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
epss
|
Fri, 11 Jul 2025 00:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lockout legitimate users for a certain period by repeatedly attempting to login with incorrect passwords. The legitimate users will be unable to login until a certain period has passed after the lockout or until the product is reset. | |
Title | Denial-of-Service Vulnerability in MELSEC iQ-F Series | |
Weaknesses | CWE-645 | |
References |
| |
Metrics |
cvssV3_1
|

Status: PUBLISHED
Assigner: Mitsubishi
Published: 2025-07-11T00:16:43.275Z
Updated: 2025-07-11T13:34:05.817Z
Reserved: 2025-05-27T03:34:31.761Z
Link: CVE-2025-5241

Updated: 2025-07-11T13:34:00.991Z

Status : Awaiting Analysis
Published: 2025-07-11T01:15:29.487
Modified: 2025-07-15T13:14:49.980
Link: CVE-2025-5241

No data.