CVE-2025-7630CWE-287CWE-307

OTP Password Brute Forcing in DorukNet's Wispotter

Medium · published February 18, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

Improper Restriction of Excessive Authentication Attempts, Improper Authentication vulnerability in Doruk Communication and Automation Industry and Trade Inc. Wispotter allows Password Brute Forcing, Brute Force.

This issue affects Wispotter: from 1.0 before v2025.10.08.1.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00276 · 19.0th percentile
Weaknesses
CWE-287 · Improper Authentication; CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2026-02-18T12:09Z
EPSS history
Timeline
  • 18 FEB 12:09Z
    OTP Password Brute Forcing in DorukNet's Wispotter
    cvelistv5