Default credentials

2023-06-0120:15:00

PRIOn knowledge base

www.prio-n.com

captive portal

brute force

password recovery

user accounts

security vulnerability

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%

JSON

The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of attempts for password recovery, allowing attackers to brute force valid user accounts to gain access to login credentials.

CPENameOperatorVersion
cloud_wifilt4.2.17

CPE	Name	Operator	Version
	cloud_wifi	lt	4.2.17

References

github.com/Alkatraz97/CVEs/blob/main/CVE-2023-33754.md