What’s Vulnerable › Vulnerabilities

CVE-2023-6928: Improper Restriction of Excessive Authentication Attempts

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-19 · updated 2026-06-17
• Weakness: CWE-307

Description

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system.

Affected products

• EuroTel ETL3100: 01c01, 01x37

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05

Get alerted when CVE-2023-6928 or the next vulnerability affects your stack