Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2025-0417

Valmet DNA Lack of protection against brute force attacks

Description

Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Valmet Valmet DNA

Default version status: unaffected

  • C2007 to ≤ C2024affected

References