This vulnerability (CWE-307) in BG-TEK Coslat Hotspot affects versions before 6.26.0.R.20250227 and is characterized by insufficient controls on the number of authentication attempts allowed. This improper restriction can lead to password brute forcing attacks and abuse of the authentication mechanism. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low complexity and no privileges or user interaction required, impacting confidentiality and integrity but not availability. No patch or official remediation guidance has been provided as of the publication date.

The vulnerability allows an unauthenticated attacker to perform repeated authentication attempts against the Coslat Hotspot device, potentially leading to unauthorized access if passwords are brute forced successfully. This impacts the confidentiality and integrity of the device's authentication process. There is no indication of availability impact or active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, implement network-level protections such as limiting access to the authentication interface, monitoring for brute force attempts, and enforcing strong password policies. Avoid relying solely on the device's native authentication controls for protection.