Schweitzer Engineering Laboratories Blueframe Software Brute-Force Credential Discovery Vulnerability

A vulnerability exists in the Blueframe software suite by Schweitzer Engineering Laboratories, allowing an unauthenticated user to perform brute-force attacks on account credentials. This issue arises from a lack of rate limiting, enabling the discovery of credentials through repeated login attempts.

Impact

Exploitation of this vulnerability could lead to unauthorized access by allowing an attacker to guess and obtain valid account credentials.

Remediation

Users can update to Blueframe OS version 1.12.0 or later, where this vulnerability has been addressed.