CWE-307: Improper Restriction of Excessive Authentication Attempts, page 15
Filter
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.
What the weakness is: CWE-307 at MITRE. OWASP Top 10: A07:2025 Authentication Failures
Related attack patterns (CAPEC): 7
- CAPEC-16 Dictionary-based Password Attack Likelihood: Medium · Severity: High
- CAPEC-49 Password Brute Forcing Likelihood: Medium · Severity: High
- CAPEC-560 Use of Known Domain Credentials Likelihood: High · Severity: High
- CAPEC-565 Password Spraying Likelihood: High · Severity: High
- CAPEC-600 Credential Stuffing Likelihood: High · Severity: High
- CAPEC-652 Use of Known Kerberos Credentials Likelihood: Medium · Severity: High
- CAPEC-653 Use of Known Operating System Credentials Likelihood: High · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-307, as MITRE names them. Credits.
Ask an AI about CWE-307
Show the prompt
Explain CWE-307: Improper Restriction of Excessive Authentication Attempts and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/307.html and https://cve.bz/cve/cwe/307?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.8CVE-2017-7898EPSS 7.0%
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BB…
- 9.8CVE-2017-1197EPSS 1.6%
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 123672.
- 9.8CVE-2017-7915EPSS 1.5%
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150…
- 9.8CVE-2016-9124EPSS 2.2%
Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of Revive Adserver is vulnerable to password-guessing attacks. An account lockdown feature was considered, but rejected to …
- 9.8CVE-2016-9366EPSS 3.1%
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPo…
- 9.8CVE-2016-9361ExploitEPSS 20%
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPo…
- 9.1CVE-2014-5414EPSS 4.8%
Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restrict the number of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force…
- 7.5CVE-2002-0628EPSS 2.2%
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
- 9.8CVE-2001-1291ExploitEPSS 8.9%
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing.
- 9.8CVE-2001-0395EPSS 1.9%
Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brute force password guessing.
- 9.8CVE-2001-1339ExploitEPSS 7.5%
Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks.
- 9.8CVE-1999-1324EPSS 3.1%
VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct …
- 7.5CVE-1999-1152EPSS 1.6%
Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack.