CVE-2024-41682CWE-307

A vulnerability has been identified in Location Intelligence family (All versions < V4.4)

Medium · published August 13, 2024

CVSS v4.0
6.9
EPSS
0%
Percentile
37.6
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Location Intelligence family (All versions < V4.4). Affected products do not properly enforce restriction of excessive authentication attempts. This could allow an unauthenticated remote attacker to conduct brute force attacks against legitimate user passwords.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00444 · 37.6th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2024-08-13T07:54Z
EPSS history
Timeline
  • 13 AUG 07:54Z
    A vulnerability has been identified in Location Intelligence family (All versions < V4.4)
    cvelistv5