CVE-2023-33754

2023-06-0100:00:00

mitre

www.cve.org

captive portal

brute force

password recovery

user accounts

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

29.8%

JSON

The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of attempts for password recovery, allowing attackers to brute force valid user accounts to gain access to login credentials.

References

github.com/Alkatraz97/CVEs/blob/main/CVE-2023-33754.md