Lucene search

K
cvelistIcscertCVELIST:CVE-2023-6928
HistoryDec 19, 2023 - 10:58 p.m.

CVE-2023-6928 Improper Restriction of Excessive Authentication Attempts

2023-12-1922:58:50
CWE-307
icscert
www.cve.org
1
eurotel etl3100
excessive authentication attempts
remote password attacks
system control

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ETL3100",
    "vendor": "EuroTel",
    "versions": [
      {
        "status": "affected",
        "version": "v01c01"
      },
      {
        "status": "affected",
        "version": "v01x37"
      }
    ]
  }
]

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

Related for CVELIST:CVE-2023-6928