Описание
The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This could allow an attacker to perform automated authentication attacks against deployments that rely on password based authentication.
EPSS
Процентиль: 42%
0.00504
Низкий
7.5 High
CVSS3
Дефекты
CWE-307
Связанные уязвимости
CVSS3: 7.5
github
около 2 месяцев назад
The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This could allow an attacker to perform automated authentication attacks against deployments that rely on password based authentication.
EPSS
Процентиль: 42%
0.00504
Низкий
7.5 High
CVSS3
Дефекты
CWE-307