CVE-2022-33106

CriticalCVSS 9.8

Published: 12/10/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

52th percentile - higher than 52% of all known CVEs

Summary

WiJungle NGFW version U250 was found to have no rate limit on login requests, allowing an attacker to brute force the admin password and take over the account.

Risk Assessment

The risk is unauthorized takeover of the admin account, potentially leading to full compromise of the device and network.

Recommendation

Immediately update WiJungle NGFW to the latest version and implement rate limiting on login attempts.

Original NVD description (English source)

WiJungle NGFW Version U250 was discovered to be vulnerable to No Rate Limit attack, allowing the attacker to brute force the admin password leading to Account Take Over.