Turkiye Electricity Transmission Corporation Mobile Application Brute Force Vulnerability

A vulnerability allowing brute force attacks has been identified in the Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application, specifically in versions 1.6.2 prior to 1.13. This issue arises from improper restrictions on excessive authentication attempts, enabling attackers to exploit this weakness.

Impact

The vulnerability allows for brute force attacks, where an attacker can repeatedly attempt to guess authentication credentials, potentially leading to unauthorized access.

Remediation

Users are advised to update the application to version 1.13 or later.