CVEvulnerability

CVE-2025-0417

7.0 HIGH Published 2025-04-01 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-04-01
Last modified
2026-06-17
Assigner
db4dfee8-a97e-4877-bfae-eba6d14a2166
CVSS 4.0 (db4dfee8-a97e-4877-bfae-eba6d14a2166)
7.0 HIGH — CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:D/RE:L/U:Green
Weaknesses
CWE-307

Description

Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations.

Related

Weakness · CWE (1)

  • CWE-307 Improper Restriction of Excessive Authentication Attempts weakness

References