CVE-2025-65427

Published December 16th, 2025

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers to brute force password enumerations.

kirubel-cve/CVE-2025-65427

CVE-2025-65427: Missing rate limiting in Dbit N300 T1 Pro router login API allows brute-force attacks

GitHub