CVE-2024-41904CWE-307

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0)

High · published August 13, 2024

CVSS v4.0
8.7
EPSS
1%
Percentile
44.6
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not properly enforce restriction of excessive authentication attempts. This could allow an unauthenticated attacker to conduct brute force attacks against legitimate user credentials or keys.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00539 · 44.6th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2024-08-13T07:54Z
EPSS history
Timeline
  • 13 AUG 07:54Z
    A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0)
    cvelistv5