PiiGAB M-Bus

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PiiGAB, Processinformation i Göteborg Aktiebolag Equipment: M-Bus SoftwarePack 900S Vulnerabilities: Code Injection, Improper Restriction of Excessive Authentication Attempts, Unprotected Transport of...

CVE-2023-32224

D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts...

CVE-2023-32224

D-Link DSL-224 router (firmware version 3.0.10) is affected by CWE-307: Improper Restriction of Excessive Authentication Attempts. The vulnerability enables authentication bypass due to inadequate restriction on repeated authentication attempts in the device’s login mechanism. Reported across mul...

CVE-2023-32224 D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts

D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts...

CVE-2022-42478

An Improper Restriction of Excessive Authentication Attempts CWE-307 in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints...

Input validation

An Improper Restriction of Excessive Authentication Attempts CWE-307 in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints...

CVE-2022-42478

"CVE-2022-42478" affects FortiSIEM prior to 7.0.0 and describes an improper restriction of excessive authentication attempts that could let a non-privileged user brute‑force endpoints. The issue is tied to FortiSIEM’s authentication controls and may allow targeted endpoints to be attacked. The co...

CVE-2022-42478

An Improper Restriction of Excessive Authentication Attempts CWE-307 in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints...

SUSE CVE-2023-3173

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-3173

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-3173 Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

PT-2023-23440 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.20 Description: The issue is related to improper restriction of excessive authentication attempts in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.20, update to version 2.0.20 ...

CVE-2023-3173

CVE-2023-3173 affects froxlor/froxlor prior to 2.0.20. The root cause is an improper restriction of excessive authentication attempts, with potential high impact on confidentiality, integrity, and availability (CVSS 9.8). Mitigation: upgrade to version 2.0.20 or later; apply available patches as ...

Linux Kernel ksmbd Improper Restriction of Excessive Authentication Attempts Protection Bypass Vulnerability

This vulnerability allows remote attackers to create a brute force condition on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable. The specific flaw exists within the handling of asynchronous...

PT-2023-20777 · Linagora · Linagora/Twake

Name of the Vulnerable Software and Affected Versions: linagora/twake versions prior to 2023.Q1.1223 Description: The issue is related to improper restriction of excessive authentication attempts. Recommendations: For versions prior to 2023.Q1.1223, update to version 2023.Q1.1223 or later to...

CVE-2023-2531

Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3...

Input validation

Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3...

CVE-2023-2531 Improper Restriction of Excessive Authentication Attempts in azuracast/azuracast

Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3...

CVE-2023-2531

The CVE-2023-2531 entry concerns AzuraCast (azuracast/azuracast) before version 0.18.3, where the login rate-limiting/anti-brute-force control could be bypassed, enabling credential brute-forcing. Multiple connected sources corroborate that older AzuraCast releases lacked effective restriction on...

CVE-2022-43377

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...