Vulnerabilities > CVE-2023-37482

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
CWE-203
NVD
Published: 2025-02-11
Updated: 2025-02-11

Summary

The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.

Common Weakness Enumeration (CWE)

References