The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.
                
            Metrics
Affected Vendors & Products
References
        History
                    Fri, 11 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added | 
|---|---|---|
| Metrics | epss 
 | epss 
 | 
Tue, 11 Feb 2025 15:15:00 +0000
| Type | Values Removed | Values Added | 
|---|---|---|
| Metrics | ssvc 
 | 
Tue, 11 Feb 2025 10:30:00 +0000
| Type | Values Removed | Values Added | 
|---|---|---|
| Description | The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames. | |
| Weaknesses | CWE-203 | |
| References |  | |
| Metrics | cvssV3_1 
 
 | 
 MITRE
                        MITRE
                    Status: PUBLISHED
Assigner: siemens
Published: 2025-02-11T10:26:27.720Z
Updated: 2025-04-08T08:19:41.567Z
Reserved: 2023-07-06T14:15:23.961Z
Link: CVE-2023-37482
 Vulnrichment
                        Vulnrichment
                    Updated: 2025-02-11T14:58:51.866Z
 NVD
                        NVD
                    Status : Received
Published: 2025-02-11T11:15:11.427
Modified: 2025-02-11T11:15:11.427
Link: CVE-2023-37482
 Redhat
                        Redhat
                    No data.