CVE-2025-7630

OTP Password Brute Forcing in DorukNet's Wispotter

State: Published
Severity: 5.3 Medium
Published: Feb 18, 2026
Updated: Jun 5, 2026
Reserved: Jul 14, 2025

Description

Improper Restriction of Excessive Authentication Attempts, Improper Authentication vulnerability in Doruk Communication and Automation Industry and Trade Inc. Wispotter allows Password Brute Forcing, Brute Force.

This issue affects Wispotter: from 1.0 before v2025.10.08.1.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	TR-CERT

Weaknesses

CWE-307 Improper Restriction of Excessive Authentication Attempts
CWE-287 Improper Authentication

Affected Products

Product	Versions
WispotterDoruk Communication and Automation Industry and Trade Inc.	1.0 to before v2025.10.08.1Affected

References

https://www.usom.gov.tr/bildirim/tr-26-0070government-resourcebroken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0070government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.