An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login

FIRMWARE

16-12-2025 19:33

CVE-2025-65427 Vulnerabilidad documentada

Sin puntuación

Tags

#db

#firmware

#attackers

#pass

#password

#issue

#discover

#brute force

#allow

#attack

Descripción

An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers brute force password enumerations.

http://dbit.com

http://shenzhen.com

https://github.com/kirubel-cve/CVE-2025-65427

Referencia

CVE-2025-65427

Link externo

Ver detalles

Fuente

https://nvd.nist.gov/vuln/detail/CVE-2025-65427

Resultados similares

Coincidentes en almenos en 50% de los tags

16-12-2025 CVE-2025-14553
Exposure of password hashes through an unauthenticated API response in TP-Link Tapo C210 V.1.8 ...
Ver información

16-12-2025 CVE-2023-53896
D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allow...
Ver información