CVE-2025-30235 in SecurAccess Enrol

Riassunto

di MITRE • 19/03/2025

Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: MITRE
• Prenotare: 19/03/2025
• Divulgazione: 19/03/2025
• Moderazione: accettato
• Voce: VDB-300067
• CPE: pronto
• CWE: CWE-362 (confermato)
• CVSS: 3.5 (CNA)
• EPSS: 0.00202
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-30235
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-30235
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-30235/