Valmet DNA Operate Brute Force Vulnerability

A brute force vulnerability exists in Valmet DNA Operate, allowing an unlimited number of login attempts without any rate limiting. This lack of protection increases the likelihood of password guessing, potentially leading to unauthorized access and the ability to perform switching operations.

Impact

Exploitation of this vulnerability could allow attackers to guess passwords more easily, leading to unauthorized access and the ability to perform switching operations within the application.

Remediation

Users can contact Valmet Automation Customer Service for the new version that addresses this vulnerability. Additionally, a properly configured firewall can help prevent unauthorized access from untrusted networks.