2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Kioware","vendor":"Kioware","versions":[{"lessThanOrEqual":"8.35","status":"affected","version":"0","versionType":"semver"}]}],"source":"cvd@cert.pl"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:kioware:kioware:*:*:*:*:*:windows:*:*","matchCriteriaId":"FA48DE1E-8A39-439D-BE91-A8FA7E84C1D7","versionEndIncluding":"8.35","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"KioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which protects the application from being closed, as there are no mechanisms preventing a user from excessively guessing the number.\n"},{"lang":"es","value":"KioWare para Windows (versiones hasta 8.35) permite forzar el número PIN por fuerza bruta, lo que protege la aplicación contra el cierre, ya que no existen mecanismos que impidan que un usuario adivine excesivamente el número."}],"id":"CVE-2024-3461","lastModified":"2026-06-17T07:44:18.783","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.5,"impactScore":3.6,"source":"cvd@cert.pl","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-3461","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-05-10T18:33:48.786983Z","version":"2.0.3"}}]},"published":"2024-05-14T15:41:13.350","references":[{"source":"cvd@cert.pl","tags":["Broken Link","Third Party Advisory"],"url":"https://cert.pl/en/posts/2024/04/CVE-2024-3459"},{"source":"cvd@cert.pl","tags":["Broken Link","Third Party Advisory"],"url":"https://cert.pl/posts/2024/04/CVE-2024-3459"},{"source":"cvd@cert.pl","tags":["Product"],"url":"https://www.kioware.com/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"],"url":"https://cert.pl/en/posts/2024/04/CVE-2024-3459"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"],"url":"https://cert.pl/posts/2024/04/CVE-2024-3459"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"],"url":"https://www.kioware.com/"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-307"}],"source":"cvd@cert.pl","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-307"}],"source":"nvd@nist.gov","type":"Primary"}]}
|