PT-2025-7701
CVE-2025-1629
·
Published
2025-02-24
·
Updated
2025-02-26
Description by
CVSS 2.0
2.7
LowMetricsAV:A/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Excitel Broadband Private my Excitel App version 3.13.0
Description
A vulnerability was found in the One-Time Password Handler component, leading to improper restriction of excessive authentication attempts. The vendor was contacted about this disclosure but did not respond.
Recommendations
For version 3.13.0, as a temporary workaround, consider restricting the use of the One-Time Password Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾