CVE-2024-9928CWE-307

A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts

Medium · published November 26, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
32.4
In the wild
Unconfirmed
What it is

A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts. If exploited, this could

cause account takeover and unauthorized access to the system

when an attacker conducts brute-force attacks against the

equipment login. Note that the system supports only one concurrent session and implements a delay of more than a second

between failed login attempts making it difficult to automate the

attacks.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00394 · 32.4th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2024-11-26T13:26Z
EPSS history
Timeline
  • 26 NOV 13:26Z
    A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts
    cvelistv5