CVE-2023-37482
The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side…
Published: 2025-02-11 · CVSS: 6.9 · CVSS 4.0
The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7