CVE-2024-41682 MEDIUM

CVE-2024-41682

Vendor Siemens
Product Location Intelligence family
Weakness CWE-307 · Brute force
Published August 13, 2024
Last update August 13, 2024

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

What the vulnerability does

01Description

A vulnerability has been identified in Location Intelligence family (All versions < V4.4). Affected products do not properly enforce restriction of excessive authentication attempts. This could allow an unauthenticated remote attacker to conduct brute force attacks against legitimate user passwords.

Key dates

02Disclosure timeline

August 13, 2024 CVE published
August 13, 2024 Record updated