Vulnerability · Published Feb 24, 2025 · Assigned by VulDB

CVE-2025-1629Excitel Broadband Private my Excitel App One-Time Password excessive authentication

Low 3.5

In plain English

A low-severity security flaw in my Excitel App from Excitel Broadband Private. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)3.5Low

Exploit odds (30 days)0.2%top 84.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Excitel Broadband Private my Excitel App 3.13.0 on Android. It has been classified as problematic. Affected is an unknown function of the component One-Time Password Handler. The manipulation leads to improper restriction of excessive authentication attempts. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Excitel Broadband Private	my Excitel App	3.13.0

Weakness: CWE-307, CWE-799 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

VDB-296610 | Excitel Broadband Private my Excitel App One-Time Password excessive authentication vdb-entry
VDB-296610 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
Submit #501868 | Excitel Broadband Private Ltd. myExcitel Android app 3.13.0 Insecure OTP Verification third-party-advisory