Missing Rate Limiting Vulnerability in Quantum Networks Router QN-I-470

This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative credentials, leading to unauthorized access with root privileges on the targeted device.

N/A

过多认证尝试的限制不恰当

Quantum Networks router 安全漏洞

Quantum Networks router是印度Quantum Networks公司的一款网络路由设备。 Quantum Networks router存在安全漏洞，该漏洞源于基于Web的管理界面缺少登录失败速率限制和CAPTCHA保护，可能导致同一网络上的攻击者对管理员凭据进行暴力破解，获得未经授权的root权限访问。

N/A

N/A