PatchTheCVECVE-2023-33754: The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of a
CVE-2023-33754 is a medium-severity flaw (CVSS 6.5) affecting cloud wifi. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of attempts for password recovery, allowing attackers to brute force valid user accounts to gain access to login credentials.
Why this priority
- Public exploit reference
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.7% (top 49%) |
| CISA exploited list | No |
| Weakness | CWE-307 |
| Published | 2023-06-01 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-33754?
cloud wifi: upgrade to 4.2.17. Exact commands for each OS are on this page.
Is CVE-2023-33754 being exploited?
CVE-2023-33754 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-33754 affect?
CVE-2023-33754 affects cloud wifi. Severity is medium (CVSS 6.5). The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of attempts for password recovery, allowing attackers to brute force valid user accounts to gain access to login credentials.
How urgent is CVE-2023-33754?
Priority 41/100. Public exploit reference