Vulnerabilities > CVE-2024-3461 - Improper Restriction of Excessive Authentication Attempts vulnerability in Kioware

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

kioware

CWE-307

NVD

Published: 2024-05-14

Updated: 2025-02-12

Summary

KioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which protects the application from being closed, as there are no mechanisms preventing a user from excessively guessing the number.

Vulnerable Configurations

Part	Description	Count
Application	Kioware Kioware Kioware 8.1 Kioware Kioware 8.2 Kioware Kioware 8.3 Kioware Kioware 8.4 Kioware Kioware 8.5 Kioware Kioware 8.6 Kioware Kioware 8.7 Kioware Kioware 8.8 Kioware Kioware 8.9 Kioware Kioware 8.10 Kioware Kioware 8.11 Kioware Kioware 8.12 Kioware Kioware 8.13 Kioware Kioware 8.14 Kioware Kioware 8.15 Kioware Kioware 8.16 Kioware Kioware 8.17 Kioware Kioware 8.18 Kioware Kioware 8.19 Kioware Kioware 8.20 Kioware Kioware 8.21 Kioware Kioware 8.22 Kioware Kioware 8.23 Kioware Kioware 8.24 Kioware Kioware 8.25 Kioware Kioware 8.26 Kioware Kioware 8.27 Kioware Kioware 8.28 Kioware Kioware 8.29 Kioware Kioware 8.30 Kioware Kioware 8.31 Kioware Kioware 8.32 Kioware Kioware 8.33	33

Common Weakness Enumeration (CWE)

CWE-307 - Improper Restriction of Excessive Authentication Attempts

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References