CVE-2025-0417
Valmet DNA Lack of protection against brute force attacks
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Valmet DNA Lack of protection against brute force attacks
Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations.
Reserved 2025-01-13 | Published 2025-04-01 | Updated 2025-04-01 | Assigner NCSC-FICWE-307 Improper Restriction of Excessive Authentication Attempts
Sixtus Leonhardsberger and Felix Eberstaller of LimesSecurity
www.valmet.com/...ent/vulnerabilityadvisories/cve-2025-0417/
Support options
