Endress+Hauser MEAC300-FNADE4 Improper Restriction of Excessive Authentication Attempts Vulnerability

A vulnerability exists in the Endress+Hauser MEAC300-FNADE4 due to inadequate measures preventing multiple failed authentication attempts within a short period. This flaw makes the device vulnerable to brute-force attacks. The issue is present in all versions of the MEAC300-FNADE4.

Impact

Exploitation of this vulnerability allows for brute-force attacks, where an attacker can repeatedly attempt to guess authentication credentials. This could lead to unauthorized access if the attacker successfully guesses the credentials.

Remediation

Users are strongly advised to update the MEAC300-FNADE4 to the latest version. General security practices should also be applied to minimize network exposure and restrict access to the device.