CVE-2023-33754

Published: Jun 1, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of attempts for password recovery, allowing attackers to brute force valid user accounts to gain access to login credentials.

Affected (1)

Products: Inpiazza: Cloud Wifi

Inpiazza

1 product

Cloud Wifi

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Inpiazza Cloud Wifi	Before 4.2.17

Related CWEs

CWE-307

Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (2)

https://github.com/Alkatraz97/CVEs/blob/main/CVE-2023-33754.md

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/Alkatraz97/CVEs/blob/main/CVE-2023-33754.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.