Vulnerability · Published Jun 24, 2025 · Assigned by TR-CERT
CVE-2025-4383Authentication Bypass in Art-In Systems' Wi-Fi Cloud Hotspot
Critical 9.3
In plain English
A critical-severity security flaw in Wi-Fi Cloud Hotspot from Art-in Bilişim Teknolojileri ve Yazılım Hizm. Tic. Ltd. Şti.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Severity (CVSS 3.1)9.3Critical
Exploit odds (30 days)0.4%top 68.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper Restriction of Excessive Authentication Attempts vulnerability in Art-in Bilişim Teknolojileri ve Yazılım Hizm. Tic. Ltd. Şti. Wi-Fi Cloud Hotspot allows Authentication Abuse, Authentication Bypass. This issue affects Wi-Fi Cloud Hotspot: before 30.05.2025.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Art-in Bilişim Teknolojileri ve Yazılım Hizm. Tic. Ltd. Şti. | Wi-Fi Cloud Hotspot | 0 – before 30.05.2025 |
Weakness: CWE-307 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
References
- https://www.usom.gov.tr/bildirim/tr-25-0134 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0134 government-resource