CVE-2023-6928 - Improper Restriction of Excessive Authentication Attempts

Back Back to CVE browser

CRITICAL

Improper Restriction of Excessive Authentication Attempts

Published Dec 19, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.77%

Description

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system.

Affected products

Vendor EuroTel Product n/a Default
unaffected
- Version
  v01c01
  Status
  affected
  Constraints
  -
- Version
  v01x37
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

EuroTel

n/a

unaffected

Version	Status	Constraints
v01c01	affected	-
v01x37	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-307

References (1)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05
government-resourceThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05		government-resourceThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Dec 19, 2023

Updated Aug 2, 2024

Reserved Dec 18, 2023

Link CVE-2023-6928

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-6928

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-6928