Description
Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU | all versions | — |
Advisories 1
- ICSA-21-250-01 Mitsubishi Electric MELSEC iQ-R Series CISA ICS & IT advisories · Apr 18, 2024