This vulnerability, identified as CWE-307 and CWE-287, affects Wispotter version 1.0 before v2025.10.08.1. It is caused by improper restriction of excessive authentication attempts, which enables an attacker to conduct brute force attacks against authentication mechanisms. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to a low confidentiality loss without affecting integrity or availability.

An attacker can attempt unlimited authentication attempts against Wispotter, potentially allowing password brute forcing. This could lead to unauthorized access to user accounts or systems with limited confidentiality impact. There is no reported impact on data integrity or system availability. No known exploits are reported in the wild at this time.

No official patch or fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing external protections such as rate limiting or account lockout policies if possible. Monitor vendor communications for updates regarding an official fix.