CVE-2025-0417CWE-307
Valmet DNA Lack of protection against brute force attacks
High · published April 1, 2025
What it is
Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations.
The record
Technical detail
- CVSS v4.0
- 7.0 · HIGH
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:Y/R:A/V:D/RE:L/U:Green
- EPSS
- 0.00166 · 5.6th percentile
- Weakness
- CWE-307 · Improper Restriction of Excessive Authentication Attempts
- Published
- 2025-04-01T04:02Z
EPSS history
Timeline