Unauthenticated Remote Attackers Can Brute-Force Portal Credentials with High Success Rate, Leading to Connection Loss

CVE-2024-45272

What is CVE-2024-45272?

A significant vulnerability has been identified in VDE's Remote Service Portal that allows unauthenticated remote attackers to perform brute-force attacks on user credentials. This vulnerability poses a serious risk, as attackers can exploit weak or default credentials to gain unauthorized access to the portal. Successful exploitation could lead to unauthorized operations and potential data exposure, undermining the overall security of the affected system. It is crucial for organizations utilizing this software to implement strong password policies and consider additional protective measures to mitigate the risks associated with this vulnerability.

References