by Kastro
Paper/Archive/CVE-2023-6928

CVE-2023-6928

EuroTel ETL3100 — Improper Restriction of Excessive Authentication Attempts

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 55.6.556 × 2011.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system.

Affected

ProductAffectedFixed inSource
ETL3100v01c01–CNA
ETL3100v01x37–CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcisa.gov/news-events/ics-advisories/icsa-23-353-05