CVE-2023-33754

2023-06-0100:00:00

mitre

www.cve.org

captive portal

brute force

password recovery

user accounts

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%

JSON

The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of attempts for password recovery, allowing attackers to brute force valid user accounts to gain access to login credentials.

References

github.com/Alkatraz97/CVEs/blob/main/CVE-2023-33754.md