PT-2026-20383

CVE-2025-7630

Published

2026-02-18

Updated

2026-02-18

Description by

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Doruk Communication and Automation Industry and Trade Inc. Wispotter versions prior to 2025.10.08.1

Description The software contains flaws related to improper restriction of excessive authentication attempts and improper authentication, allowing for password brute forcing. This could enable an attacker to gain unauthorized access through repeated attempts to guess valid credentials.

Recommendations Update to version 2025.10.08.1 or later.

Exploitability

Fix

Impacts

Researchers

Kaan Bekar

Vendors

Affected products

Weakness enumeration

CWE-287: Improper Authentication

CWE-307: Improper Restriction of Excessive Authentication Attempts

Related identifiers