CVE-2025-4383CWE-307

Authentication Bypass in Art-In Systems' Wi-Fi Cloud Hotspot

Critical · published June 24, 2025

CVSS v3.1
9.3
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

🚨 An improper restriction of excessive authentication attempts could let attackers slip past the gates of your Wi-Fi Cloud Hotspot without a key! 🔥 Think of it like a bouncer at a club who fails to check IDs properly—anyone can stroll right in and enjoy the party! 🍻 An attacker could exploit this vulnerability to bypass authentication altogether, gaining unauthorized access to your network. This could lead to data theft, unauthorized changes, or even using your connection for malicious purposes. The risk is significant, especially as it affects all versions before May 30, 2025!

Put simply

Think of it like a bouncer at a club who fails to check IDs properly—anyone can stroll right in and enjoy the party! 🍻 This vulnerability allows attackers to abuse or bypass authentication mechanisms due to improper restrictions on authentication attempts, which could lead to unauthorized access to the system.

What to do

An attacker could exploit this vulnerability to bypass authentication altogether, gaining unauthorized access to your network. This could lead to data theft, unauthorized changes, or even using your connection for malicious purposes. The risk is significant, especially as it affects all versions before May 30, 2025! Immediate action is required! Update your Wi-Fi Cloud Hotspot to the latest version released after May 30, 2025, and implement measures to limit the number of authentication attempts. Consider enabling account lockout mechanisms and strong password policies to shore up your defenses. You’ve got this! Take these steps now and be the hero of your network! 🦸‍♂️

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00380 · 30.8th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2025-06-24T15:18Z
EPSS history
Timeline
  • 24 JUN 15:18Z
    Authentication Bypass in Art-In Systems' Wi-Fi Cloud Hotspot
    cvelistv5