CVE-2022-32515CWE-307

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force attacks to take over the admin account…

High · published January 30, 2023

CVSS v3.1
8.6
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force attacks to take over the admin account when the product does not implement a rate limit mechanism on the admin authentication form. Affected Products: Conext™ ComBox (All Versions)

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00638 · 49.9th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2023-01-30T00:00Z
EPSS history
Timeline
  • 30 JAN 00:00Z
    A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force attacks to take over the admin account…
    cvelistv5