2 lines
3.1 KiB
JSON
2 lines
3.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Valmet DNA","vendor":"Valmet","versions":[{"lessThanOrEqual":"C2024","status":"affected","version":"C2007","versionType":"custom"}]}],"source":"db4dfee8-a97e-4877-bfae-eba6d14a2166"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations."},{"lang":"es","value":"Falta de protección contra ataques de fuerza bruta en la visualización de DNA de Valmet en DNA Operate. La posibilidad de realizar un número arbitrario de intentos de inicio de sesión sin límite de velocidad aumenta la probabilidad de que un atacante adivine contraseñas y realice operaciones de cambio."}],"id":"CVE-2025-0417","lastModified":"2026-06-17T08:26:26.200","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"YES","Recovery":"AUTOMATIC","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":7.0,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"GREEN","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:D/RE:L/U:Green","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"LOW"},"source":"db4dfee8-a97e-4877-bfae-eba6d14a2166","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0417","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-04-01T14:04:10.452695Z","version":"2.0.3"}}]},"published":"2025-04-01T04:15:38.363","references":[{"source":"db4dfee8-a97e-4877-bfae-eba6d14a2166","url":"https://www.valmet.com/about-us/about/research-and-development/vulnerabilityadvisories/cve-2025-0417/"}],"sourceIdentifier":"db4dfee8-a97e-4877-bfae-eba6d14a2166","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-307"}],"source":"db4dfee8-a97e-4877-bfae-eba6d14a2166","type":"Secondary"}]}
|