CVE-2025-0417 — Valmet DNA Lack of protection against brute force attacks

CVE-2025-0417

Valmet DNA Lack of protection against brute force attacks PUBLISHED

Description (CNA)

Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations.

Affected (CNA)

Vendor / product	Versions
Valmet / Valmet DNA	affected C2007 through C2024

CWE

CWE-307

References

https://www.valmet.com/about-us/about/research-and-development/vulnerabilityadvisories/cve-2025-0417/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.